A vulnerability was found in MongoDB Server up to 7.0.30/8.0.19/8.2.5. It has been classified as critical. This issue affects some unknown processing. The manipulation of the argument lookup/graphlookup leads to use after free.
This vulnerability is uniquely identified as CVE-2026-4148. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
