CVE-2026-9737 Details
Description
During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.
A vulnerability exists in MongoDB's query planning process when sorting data using raw BSON objects that include meta expressions. This issue can cause the server to crash by triggering an invariant failure. The vulnerability is present in MongoDB versions 8.0.27, 8.2.11, 8.3.6, and earlier versions up to 6.0. The problem arises because the query planner does not properly manage meta expressions in the sort pattern, leading to incorrect data transformations and, ultimately, a server crash.
Users can upgrade to MongoDB versions 8.2.12, 8.0.28, 7.0.39, or 8.3.7 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://jira.mongodb.org/browse/SERVER-128341 | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-617 | Reachable Assertion | [email protected] |
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Modified | CISA-ADP |
| Jul 22, 2026 | New CVE Received | [email protected] |