CVE-2026-96297

The MongoDB Server is vulnerable to a Use After Free (CWE-416) condition within its aggregation feature . When an internal aggregation stage is used in conjunction with a batch size of 0 , the server may read from memory areas that have already been released. This flaw allows an authenticated use...