Is MongoDB 8.1.0 affected?
May 27, 2025 · Release notes ↗
4 known vulnerabilities affect 8.1.0 (highest CVSS 6.5).
Your branch 8.1 has reached end of life (Sep 30, 2025).
27 newer releases in its track, up to 9.0.4. What changed up to 9.0.4
Vulnerabilities affecting 8.1.0
- 6.5 CVE-2026-6914 Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Se… fixed in 8.2.7
- 6.5 CVE-2025-13644 MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents i… fixed in 8.1.2
- 6.5 CVE-2025-10061 An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability is related to the incorrect handling of certain accumulator functions when ad… fixed in 8.1.2
- 6.5 CVE-2025-7259 An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users…
Newer releases
| 9.0.4 | Oct 14, 2026 | 8.1.0 → 9.0.4 |
| 9.0.2 | Oct 14, 2026 | 8.1.0 → 9.0.2 |
| 8.3.13 | Oct 13, 2026 | 8.1.0 → 8.3.13 |
| 8.3.11 | Sep 11, 2026 | 8.1.0 → 8.3.11 |
| 8.3.9 | Sep 8, 2026 | 8.1.0 → 8.3.9 |
| 8.3.8 | Aug 11, 2026 | 8.1.0 → 8.3.8 |
| 8.3.7 | Jul 24, 2026 | 8.1.0 → 8.3.7 |
| 8.3.4 | Jun 15, 2026 | 8.1.0 → 8.3.4 |
| 8.3.3 | Jun 15, 2026 | 8.1.0 → 8.3.3 |
| 8.3.2 | May 14, 2026 | 8.1.0 → 8.3.2 |
| 8.3.1 | Jun 3, 2026 | 8.1.0 → 8.3.1 |
| 8.3.0 | Jun 3, 2026 | 8.1.0 → 8.3.0 |
| 8.2.12 | Jul 28, 2026 | 8.1.0 → 8.2.12 |
| 8.2.11 | Jun 16, 2026 | 8.1.0 → 8.2.11 |
| 8.2.10 | Jun 16, 2026 | 8.1.0 → 8.2.10 |