What is GHSA-75j2-rc7h-2rxp?

GHSA-75j2-rc7h-2rxp is a security advisory published by GitHub Security Advisories with High severity. A use-after-free in the aggregation framework of MongoDB Server can occur when certain...

Which CVE IDs does GHSA-75j2-rc7h-2rxp cover?

GHSA-75j2-rc7h-2rxp covers the following CVE IDs: CVE-2026-120821. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-75j2-rc7h-2rxp?

GHSA-75j2-rc7h-2rxp has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-75j2-rc7h-2rxpHighCVSS 6.5

A use-after-free in the aggregation framework of MongoDB Server can occur when certain...

Vendor

GitHub Security Advisories

Published

November 10, 2026

Last Modified

November 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-120821 →

📋 Description

A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an aggregation sub-pipeline. The condition can be caused by an authenticated user with read privileges, and may result in the server terminating unexpectedly.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-120821
https://jira.mongodb.org/browse/SERVER-136285
https://github.com/advisories/GHSA-75j2-rc7h-2rxp