Percona Server for MongoDB 6.0.29-23 (2026-06-24)¶
Installation Upgrade from MongoDB Community
Percona Server for MongoDB 6.0.29-23 is an enhanced, source-available, and highly-scalable database that is a fully-compatible, drop-in replacement for MongoDB Community Edition.
Percona Server for MongoDB 6.0.29-23 includes the updates from MongoDB 6.0.29 Community Edition . It also supports the protocols and drivers of MongoDB Community 6.0.29.
Upgrade recommendation¶
This release contains a high-severity security fix affecting all Percona Server for MongoDB 6.0.x versions. We strongly recommend upgrading to version 6.0.29-23 as soon as possible.
Security update¶
- SERVER-128125 (CVE-2026-11933): A use-after-free vulnerability was identified in MongoDB Server’s server-side JavaScript engine when converting
BSONdocuments to JavaScript arrays. An authenticated user with read privileges who can execute server-side JavaScript (e.g., via$whereor$function) may trigger access to freed memory, which could result in information disclosure from themongodprocess memory or a denial of service through a server crash.
Tools packaged with this release¶
Percona repackages the upstream MongoDB Shell (mongosh) as percona-mongodb-mongosh, updating all copyright, authorship, and branding under the full product name “Percona MongoDB Shell.”
Percona also repackages and patches Mongo Tools. In this release, we’ve updated embedded Go libraries in the mongodump binary to address 15 security (severity from medium to critical) vulnerabilities:
golang.org/x/cryptoupdated from v0.45.0 to v0.52.0 — fixes CVE-2026-39827 , CVE-2026-39828 , CVE-2026-39829 , CVE-2026-39830 , CVE-2026-39835 , CVE-2026-42508 , CVE-2026-46595 , CVE-2026-46597golang.org/x/netupdated from v0.47.0 to v0.55.0 — fixes CVE-2026-25680 , CVE-2026-25681 , CVE-2026-27136 , CVE-2026-33814 , CVE-2026-39821 , CVE-2026-42502 , CVE-2026-42506
| Tool | Base version | Release notes |
|---|---|---|
MongoDB Shell (mongosh) |
2.8.3 | upstream release notes |
| Mongo Tools | 100.17.0 | upstream release notes |