Ecosystem	Package	Version

Vulnerabilities

CVE-2026-25612

CVE-2026-25612

The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks.

Published Feb 11, 2026

https://jira.mongodb.org/browse/SERVER-115296

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


conda	free/mongodb	2.4.6
conda	free/mongodb	2.6.12
conda	free/mongodb	3.3.8
conda	free/mongodb	3.3.9
rpm	libmongodb	2.4.14-4.el6
rpm	libmongodb-devel	2.4.14-4.el6
conda	main/mongodb	3.4.10
conda	main/mongodb	3.6.5
conda	main/mongodb	4.0.2
conda	main/mongodb	4.0.3
conda	main/mongodb	4.2.14
cargo	mongodb	0.0.1
cargo	mongodb	0.1.0
cargo	mongodb	0.1.1
cargo	mongodb	0.1.3
cargo	mongodb	0.1.4
cargo	mongodb	0.1.5
cargo	mongodb	0.1.6
cargo	mongodb	0.1.7
cargo	mongodb	0.1.8
cargo	mongodb	0.10.0
cargo	mongodb	0.11.0
cargo	mongodb	0.2.0
cargo	mongodb	0.2.1
cargo	mongodb	0.2.2
cargo	mongodb	0.2.3
cargo	mongodb	0.2.5
cargo	mongodb	0.2.6
cargo	mongodb	0.2.7
cargo	mongodb	0.2.8
cargo	mongodb	0.2.9
cargo	mongodb	0.3.0
cargo	mongodb	0.3.10
cargo	mongodb	0.3.11
cargo	mongodb	0.3.12
cargo	mongodb	0.3.1
cargo	mongodb	0.3.2
cargo	mongodb	0.3.3
cargo	mongodb	0.3.4
cargo	mongodb	0.3.5
cargo	mongodb	0.3.6
cargo	mongodb	0.3.7
cargo	mongodb	0.3.8
cargo	mongodb	0.3.9
cargo	mongodb	0.4.0
cargo	mongodb	0.9.0-alpha
cargo	mongodb	0.9.0
cargo	mongodb	0.9.1
cargo	mongodb	0.9.2
cargo	mongodb	1.0.0

CVE-2026-25612 | Components Impacted | Sonatype Guide | Sonatype Guide