BIT-MONGODB-2026-4358 Memory safety issues in slot-based execution hash table spill

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...

CVE-2026-4358

CVE-2026-4358 affects MongoDB's slot-based execution (SBE) engine. A specially crafted aggregation query with $lookup by an authenticated user with write privileges can trigger a memory safety issue (double-free or use-after-free) when an in-memory hash table spills to disk. Impact per metrics in...

Memory safety issues in slot-based execution hash table spill

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...