CVE-2025-7259
Last modified
CVE-2025-7259 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mongodb | Mongodb | 8.1.0 |
References
- https://jira.mongodb.org/browse/SERVER-102693Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-7259?
How severe is CVE-2025-7259?
How do I fix CVE-2025-7259?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-7253IrfanView CADImage Plugin DWG File Parsing Memory Corruption…7.8
- CVE-2025-7254IrfanView CADImage Plugin DXF File Parsing Memory Corruption…7.8
- CVE-2025-7255IrfanView CADImage Plugin DWG File Parsing Memory Corruption…7.8
- CVE-2025-7256IrfanView CADImage Plugin DXF File Parsing Memory Corruption…7.8
- CVE-2025-7257IrfanView CADImage Plugin DXF File Parsing Memory Corruption…7.8
- CVE-2025-7258IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Wri…7.8
- CVE-2025-7260IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Wri…7.8
- CVE-2025-7261IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Rea…7.8
- CVE-2025-7262IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Rea…7.8
- CVE-2025-7263IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Rea…7.8
- CVE-2025-7264IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Rea…7.8
- CVE-2025-7265IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Rea…7.8
Are you affected by CVE-2025-7259?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST