---
id: CVE-2026-82054
title: >-
  A security issue exists in MongoDB server's JSON Pointer parser used during
  $jsonSchema query filter processing
summary: >-
  A security issue exists in MongoDB server's JSON Pointer parser used during
  $jsonSchema query filter processing. When a find command includes a specially
  crafted $jsonSchema filter field, the parser processes the input without
  enforcing …
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-770
vendor: mongodb
product: mongodb
affected:
  - 'mongodb >= 7.0.0, < 7.0.41'
  - 'mongodb >= 8.0.0, < 8.0.30'
  - 'mongodb >= 8.2.0, <= 8.2.12'
  - 'mongodb >= 8.3.0, < 8.3.9'
  - mongodb = 9.0.0
  - mongodb = 9.1.0
patched:
  - mongodb 8.3.9
published: '2026-09-08'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T20:40:15.627'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-82054'
references:
  - url: 'https://jira.mongodb.org/browse/SERVER-130901'
    label: cna@mongodb.com
tags:
  - nvd
  - cve.org
epss: 0.00402
epssPercentile: 0.31741
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-08T17:56:10.734402Z'
ingestedAt: '2026-09-08T16:34:19.257Z'
---

## Overview

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server's out-of-memory handler to terminate the mongod process and deny service to all connected clients.

## Affected

- `mongodb >= 7.0.0, < 7.0.41`
- `mongodb >= 8.0.0, < 8.0.30`
- `mongodb >= 8.2.0, <= 8.2.12`
- `mongodb >= 8.3.0, < 8.3.9`
- `mongodb = 9.0.0`
- `mongodb = 9.1.0`

## Remediation

Upgrade past the affected range:

- `mongodb 8.3.9`