CVE-2026-9749

描述

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer (that is, many results are routed to the same consumer), the server reaches the code path where a full per-consumer buffer is detected but the internal "high watermark" for that key range is not updated as intended.

如何修補 CVE-2026-9749

要修補 CVE-2026-9749,請將受影響套件升級到下列已修補版本。

• Bitnami/mongodb—升級至 7.0.35 或更新版本

CVE-2026-9749 正在被利用嗎?

低 — EPSS 為 0.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• >= 7.0.0, < 7.0.35, >= 8.0.0, < 8.0.24, >= 8.2.0, < 8.2.10, >= 8.3.0, < 8.3.3

CVSS 分數

參考連結(2)

• WEBjira.mongodb.org/browse/SERVER-124031
• WEBnvd.nist.gov/vuln/detail/CVE-2026-9749