All vulnerabilities

Servers and applications

CVE-2025-6710

MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON inputs may induce unwarranted levels of recursion, resulting in excessive stack space consumption. Such inputs can lead to a stack overflow that causes the server to crash which could occur pre-authorisation. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and…

Severity
High 7.5
Published
26 Jun 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
6.0.21, 7.0.17, 8.0.5
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 6.0.0 before 6.0.21
  • From 7.0.0 before 7.0.17
  • From 8.0.0 before 8.0.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-6710
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-6710