Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server, which occurs if that server is later chosen to take over as the main server while it still lacks some recent changes. MongoDB released fixed versions earlier this week.