This vulnerability (CVE-2026-9750) in MongoDB Server involves a reachable assertion triggered by crafted documents created by authenticated users. These documents interfere with internal metadata processing during query execution due to inadequate separation between user data and internal metadata in certain execution paths. The flaw can cause the server to crash or produce incorrect query results. The CVSS 4.0 base score is 7.1, indicating high severity. Affected versions explicitly include 7.0.0, 8.0.0, 8.2.0, and 8.3.0. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

An authenticated user can exploit this vulnerability to cause denial of service by crashing the MongoDB server or to compromise data integrity by causing the server to return incorrect query results. This can disrupt application availability and reliability dependent on the affected MongoDB instances.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is provided, users should monitor MongoDB vendor communications for updates. Until a patch is available, restrict authenticated user privileges to the minimum necessary to reduce risk.