Ecosystem	Package	Version

Vulnerabilities

CVE-2026-25609

CVE-2026-25609

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.

Published Feb 16, 2026

https://jira.mongodb.org/browse/SERVER-112952

CVSS ScoreMedium

4.3

Ecosystem	Package	Version


conda	free/mongodb	2.4.6
conda	free/mongodb	2.6.12
conda	free/mongodb	3.3.8
conda	free/mongodb	3.3.9
conda	main/mongodb	3.4.10
conda	main/mongodb	3.6.5
conda	main/mongodb	4.0.2
conda	main/mongodb	4.0.3
conda	main/mongodb	4.2.14
cargo	mongodb	0.0.1
cargo	mongodb	0.1.0
cargo	mongodb	0.1.1
cargo	mongodb	0.1.3
cargo	mongodb	0.1.4
cargo	mongodb	0.1.5
cargo	mongodb	0.1.6
cargo	mongodb	0.1.7
cargo	mongodb	0.1.8
cargo	mongodb	0.10.0
cargo	mongodb	0.11.0
cargo	mongodb	0.2.0
cargo	mongodb	0.2.1
cargo	mongodb	0.2.2
cargo	mongodb	0.2.3
cargo	mongodb	0.2.5
cargo	mongodb	0.2.6
cargo	mongodb	0.2.7
cargo	mongodb	0.2.8
cargo	mongodb	0.2.9
cargo	mongodb	0.3.0
cargo	mongodb	0.3.10
cargo	mongodb	0.3.11
cargo	mongodb	0.3.12
cargo	mongodb	0.3.1
cargo	mongodb	0.3.2
cargo	mongodb	0.3.3
cargo	mongodb	0.3.4
cargo	mongodb	0.3.5
cargo	mongodb	0.3.6
cargo	mongodb	0.3.7
cargo	mongodb	0.3.8
cargo	mongodb	0.3.9
cargo	mongodb	0.4.0
cargo	mongodb	0.9.0-alpha
cargo	mongodb	0.9.0
cargo	mongodb	0.9.1
cargo	mongodb	0.9.2
cargo	mongodb	1.0.0
cargo	mongodb	1.1.0-beta
cargo	mongodb	1.1.0

CVE-2026-25609 | Components Impacted | Sonatype Guide | Sonatype Guide