CVE-2026-9749
MEDIUM6.5CVSS v3
—CVSS v2
0.27%
EPSS (exploit probability)
CWE-617CWE
Description
This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer (that is, many results are routed to the same consumer), the server reaches the code path where a full per-consumer buffer is detected but the internal "high watermark" for that key range is not updated as intended.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.