CVE Vulnerabilities

CVE-2025-10060

Operation on a Resource after Expiration or Release

Published: Sep 05, 2025 | Modified: Sep 18, 2025
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0 versions prior to 6.0.25, MongoDB Server v7.0 versions prior to 7.0.22 and MongoDB Server v8.0 versions prior to 8.0.12

Weakness

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

Affected Software

Name Vendor Start Version End Version
Mongodb Mongodb 6.0.0 (including) 6.0.25 (excluding)
Mongodb Mongodb 7.0.0 (including) 7.0.22 (excluding)
Mongodb Mongodb 8.0.0 (including) 8.0.12 (excluding)

References