Skip to content

Rate this page
☆ ☆ ☆ ☆ ☆
Thanks for your feedback
Thank you! The feedback has been submitted.

Get free database assistance or contact our experts for personalized support.

Percona Server for MongoDB 8.0.34-15 (2026-10-22)

Installation Upgrade from MongoDB Community

We are pleased to announce Percona Server for MongoDB 8.0.34-15, the drop-in replacement for MongoDB Community Edition. Percona Server for MongoDB supports MongoDB Community protocols and drivers and enhances it with enterprise-grade features for free, helping you meet your organization’s requirements for high availability, reliability, and data security.

Percona Server for MongoDB 8.0.34-15 includes the improvements and bug fixes of:

Important

Percona Server for MongoDB 8.0.34-15 contains fixes for:

You can find details at the bottom of this page.

Release highlights

MongoDB Database Tools are distributed as a separate tarball

Starting with this release, MongoDB Database Tools (mongodump, mongorestore, mongoexport, mongoimport, and others) are no longer included in the Percona Server for MongoDB binary tarball. If you install Percona Server for MongoDB from tarballs, download the MongoDB Database Tools tarball separately from the Percona Downloads website.

This change aligns the distribution of MongoDB Database Tools with how MongoDB Shell (mongosh) is already distributed. It also allows us to deliver tool updates, including security fixes, independently of the server releases.

If you install Percona Server for MongoDB from RPM or DEB packages, nothing changes for you: MongoDB Database Tools are installed as before.

Upgrade recommendation

We recommend upgrading to version 8.0.34-15 to benefit from the backup and checkpoint fixes included in MongoDB 8.0.34.

Changelog

Improvement

  • PSMDB-1944: MongoDB Database Tools packages are now built independently of Percona Server for MongoDB packages. This allows tool updates, including security fixes, to be prepared without rebuilding the server packages.

  • PSMDB-2182: Improved telemetry for x.509 certificate authentication. x.509 is used by default for internal authentication between members of replica sets and sharded clusters, so telemetry previously reported it as enabled on almost every instance. Telemetry now reports x.509 usage for client authentication separately from its use for internal cluster authentication.

Bugs fixed

  • PSMDB-2126: Fixed an issue where streaming a backup to Google Cloud Storage through its S3-compatible API failed. The issue was caused by the upgrade of the AWS SDK for C++ to version 1.11.471, which added empty checksum elements to multipart upload requests that Google Cloud Storage rejects.

Improvements and bug fixes from upstream MongoDB

This release includes the following changes listed in the MongoDB 8.0.34 patch release notes .

Bugs fixed

  • SERVER-132946 : Heap-use-after-free in $_internalApplyOplogUpdate stage when reading via getMore after aggregate Invocation is destroyed

  • SERVER-134618 : Fix serialization of constant values in $bucket stage

  • SERVER-131412 : Improve Validation Expression

  • SERVER-98105 : Fixed an issue that could occur when a backup ran at the same time as a drop operation. Cleanup of storage files pending deletion now pauses until the backup cursor closes.

  • WT-18353 : Fixed an issue that could cause repeated server crashes during checkpoints when incremental backup was configured and a modified file’s metadata lacked the checkpoint_backup_info field. The issue affected files whose metadata predated the introduction of this field.

Security fixes from upstream MongoDB

The severity categories below follow CVSS scores version 4.0.

High severity

  • SERVER-131412 (CVE-2026-104004 ): MongoDB Server’s collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.

Medium severity

  • SERVER-132946 (CVE-2026-96297 ): A use-after-free issue in the $_internalApplyOplogUpdate aggregation stage could expose unrelated data from server memory in query results. An authenticated user with read privileges could trigger the issue by combining the stage with a batch size of 0. The server process could also terminate unexpectedly.

  • SERVER-134618 (CVE-2026-103965 ): An issue in the $bucket aggregation stage could cause constant values to be interpreted as field references during internal query rewriting. Under certain conditions, an authenticated user with read access could receive field values that the query did not intend to return.

For the complete upstream changelog, see MongoDB 8.0.34 Community Edition .

Tools packaged with this release

This release includes the following tools:

Tool Base version Release notes
MongoDB Shell (mongosh) 2.13.0 upstream release notes
Mongo Tools 100.19.1 upstream release notes