CVE-2026-120820 is a vulnerability in MongoDB Server where an in-memory table tracking per-namespace statistics for encrypted-field operations grows without limit. Any user with basic read privileges can cause the server to consume increasing memory by issuing read commands referencing arbitrary namespaces. This memory is only freed upon server restart, potentially leading to degraded performance due to memory exhaustion.