MongoDB Internal Convert Bucket Index Stats DoS

The vulnerability of the $internalConvertBucketIndexStats processing mechanism in the MongoDB database management system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-9748: Reachable Assertion

The $internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechanism, but rather a TeeBuffer-internal signal used solely by $facet to coordinate its sub-pipelines...