This vulnerability arises during the query planning phase in MongoDB Server when reading the sort pattern in raw BSONObj form. The issue is that in some code paths, the meta expression case is not explicitly handled, which can lead to incorrect transformations and ultimately trigger an invariant failure (CWE-617). The affected versions are exactly 7.0, 8.0, 8.2.0, and 8.3.0. The CVSS 4.0 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required beyond low, no user interaction, and high impact on availability.

The vulnerability can cause the MongoDB server to fail an internal assertion during query planning, potentially leading to a denial of service due to server crash or instability. There is no indication of code execution or data breach from the provided data. The impact is primarily on availability.

No official patch or remediation level has been provided yet. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should monitor MongoDB advisories for updates. No specific workaround or mitigation is indicated in the available data.