TL;DR MongoDB fixed 24 MongoDB Server vulnerabilities in recent releases. One critical flaw can leave authorization disabled at startup. Most others cause denial of service, and no in-the-wild exploitation has been confirmed. Why these MongoDB Server vulnerabilities matter MongoDB runs behind countless web and mobile apps. A crash or auth gap there hits every database on the node. These MongoDB Server vulnerabilities span versions 7.0, 8.0, and 8.3.

MongoDB server instances that communicate with each other inside a replica set can be tricked into sending the internal admin credential in a less‑secure.

MongoDB Server may let a low‑privilege user cause two internal processes to clash, corrupting memory and potentially crashing the database.

When MongoDB checks its startup settings, it can ignore the case of the word that turns security on.

MongoDB's compute mode can be vulnerable to memory corruption if it processes invalid data from external sources.