# CVE-2026-118383: Use-after-free vulnerability in MongoDB

Source: [Datadog Security Labs](https://securitylabs.datadoghq.com/articles/cve-2026-118383-mongodb-server-use-after-free/) · 2026-11-11 · Security
Page: https://themorning.dev/story/cve-2026-118383-use-after-free-vulnerability-in-mongodb-f27b1f007d5bab4e
Kind: security · Impact: high

## In brief

- Datadog Security Labs reproduced CVE-2026-118383, a use-after-free vulnerability in MongoDB Server's primary catch-up process.
- Unauthenticated clients can set up the condition that triggers the flaw, according to the source.
- The source describes the vulnerability as critical and explains how to detect and remediate it.

## Why it matters

Operators of MongoDB Server deployments may be exposed to a critical memory-safety flaw that unauthenticated clients can reach, so checking whether their deployments are affected is a priority.

## What to do

- Review Datadog Security Labs' detection and remediation guidance for CVE-2026-118383

## CVEs

- CVE-2026-118383

## Timeline

- 2026-11-11: Datadog Security Labs published its reproduction of CVE-2026-118383 with detection and remediation guidance

## Coverage

- [CVE-2026-118383: Use-after-free vulnerability in MongoDB](https://securitylabs.datadoghq.com/articles/cve-2026-118383-mongodb-server-use-after-free/) — Datadog Security Labs, 2026-11-11

Tags: mongodb, security, vulnerability, use-after-free, database

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev