Is CVE-2026-120955 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-120955?

CVE-2026-120955 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-120955

Description

The GridFS file download API in the MongoDB C Driver does not check the result of an internal operation under certain error conditions during file retrieval. This can cause the process to terminate when stream operations continue. A user who can influence file download parameters can trigger this condition, which may result in service unavailability for applications using the affected API.