CVE-2026-120803

A use-after-free vulnerability exists in MongoDB 's SBE (Slot-Based Execution) implementation of a window function accumulator, specifically within certain $setWindowFields aggregation pipelines. The issue occurs when an accumulator retains a dangling pointer to freed memory; dereferencing this s...