MongoDB 7.0.40 is released

Britt_Snyman · August 13, 2026, 3:17pm

MongoDB 7.0.40 is out and is ready for production deployment. This release contains only fixes since 7.0.39, and is a recommended upgrade for all 7.0 users.

Fixed in this release:

SERVER-117854 GranularityRounderPowersOfTwo should assert for inf numbers
SERVER-129460 Ensure valid jsonSchema in time series updates
SERVER-129617 Better validation for NaN in $percentile and $median
SERVER-129618 Disallow user-provided $vectorSearch arguments from overriding internally generated options
SERVER-129994 Fix a malformed FlatBSON store caused by inserting duplicate field names
SERVER-130110 Gate the internal-only _internalSetObjToThis field of $function behind an internal-client check
SERVER-130111 Prevent invalid type conversion during match expression serialization
SERVER-130117 Fix a heap use-after-free in collection validation for big polygons
SERVER-130139 Account for the o-versus-UUID consistency check
SERVER-130167 Stop the JavaScript scope from constructing delete requests by concatenating unsanitized _id fields
SERVER-130188 Exclude partial indexes from 2dsphere geometry skip-validation
SERVER-130198 Increase the authorization requirement for slowms and sampleRate in the profile command
SERVER-130264 Apply the intra-cluster SASL mechanism allowlist in egress connection setup
SERVER-130266 Prohibit $text and $near in $_internalSchemaCond
SERVER-130481 Allow the symbol type in CommandHelpers::parseNsFromCommand
SERVER-130544 Enforce the internal user for commitTransaction and abortTransaction on prepared transactions
SERVER-130633 Authorize compactStructuredEncryptionData and cleanupStructuredEncryptionData at database scope

7.0 Release Notes | All Issues | Community Download

As always, please let us know of any issues.

– The MongoDB Team