MongoDB 7.x — End of Life

Active High risk
EOL: Oct 31, 20244 releases in this series5 CVEs

MongoDB 7.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
7.3Mar 27, 2024Oct 31, 20247.3.4EOL
7.2Jan 23, 2024Mar 27, 20247.2.2EOL
7.1Oct 18, 2023Jan 23, 20247.1.1EOL
7.0Aug 31, 2023Aug 31, 20277.0.32Active

CVEs affecting MongoDB 7.x (5)

CVESeverityCVSSEPSSKEVCycleDescriptionPublished
CVE-2026-8053HIGH8.80.09%7.0An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write priv…May 13, 2026
CVE-2026-8199MEDIUM6.50.05%7.0An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAny…May 13, 2026
CVE-2026-8201MEDIUM6.40.03%7.0A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting clie…May 13, 2026
CVE-2026-8202MEDIUM4.30.05%7.0Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $r…May 13, 2026
CVE-2026-8200LOW2.70.04%7.0When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the loc…May 13, 2026

MongoDB 7.x will reach end of life — migrate to MongoDB 8.x

MongoDB 8.x is the next major release. Plan your upgrade before MongoDB 7.x stops receiving security patches.

See MongoDB 8.x

Frequently asked questions

Is MongoDB 7 end of life?

Partially. Some MongoDB 7.x releases have reached EOL. Check the version table above for the exact status of each sub-release.

What CVEs affect MongoDB 7?

There are 5 CVEs tracked for MongoDB 7.x. See the full list above with CVSS and EPSS scores.

What is the latest MongoDB 7 version?

The latest MongoDB 7.x patch release is 7.3.4, released on August 14, 2024. Always run the latest patch to benefit from all security fixes.

How to migrate from MongoDB 7 to MongoDB 8?

To migrate from MongoDB 7 to MongoDB 8: (1) review the official MongoDB 8 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run MongoDB 7 in production?

MongoDB 7 is still supported and safe for production use until October 31, 2024. Ensure you are running the latest patch version (7.3.4) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA