MongoDB 8.3.4

MongoDB has released version 8.3.4, the latest patch in the 8.3 series, on June 11, 2026. The update addresses a critical security vulnerability (CVE-2026-11933) alongside several stability improvements for the rapidly iterating 8.3 release train.

What Changed in MongoDB 8.3

MongoDB 8.3 originally shipped on May 7, 2026, as a significant feature release. The 8.3 series represents a major step forward in performance and operational efficiency, with the MongoDB team focusing on three core areas.

Performance Gains

According to MongoDB's internal benchmarks, 8.3 delivers 10–40% improvements across critical metrics including CPU utilization, overall throughput, and system latency. The headline number: up to 45% more reads and 35% more writes compared to MongoDB 8.0, driven by a redesigned command path and new cost-based query optimization.

• Cost-based ranker — Introduced in 8.3.3, the new query planner ranks execution plans by estimated cost rather than relying solely on heuristics. Early adopters report 20–30% faster query times for complex aggregations.
• LTO (Link-Time Optimization) — Compiled with LTO enabled, the mongod binary is more efficient at the CPU instruction level, contributing to the across-the-board throughput gains.
• Reduced memory overhead — Memory-intensive operations now track disk usage more efficiently, reducing the risk of OOM scenarios under heavy write loads.

New Shard Management

MongoDB 8.3 refactors the sharding management process with new commands that simplify cluster topology changes. The reshardCollection command has been streamlined, and new monitoring metrics give operators better visibility into chunk distribution across shards.

Aggregation and Query Enhancements

• New aggregation expressions for type coercion, reducing the need for $addFields workarounds
• Slow query logs now include in-progress queries, making it easier to identify long-running operations before they become problems
• Enhanced $convert operator with better error messages and broader type support

Security: CVE-2026-11933

MongoDB 8.3.4 patches CVE-2026-11933, a security vulnerability affecting the MongoDB wire protocol. Users running any previous 8.3.x release should upgrade to 8.3.4 as soon as possible. Users on the 8.0 or 7.0 stable tracks should check the respective patch release notes for their backported fixes.

Upgrade Notes

As with all 8.x rapid releases, MongoDB 8.3 reaches end of life on July 31, 2026. Organizations requiring longer support windows should plan their migration to the next rapid release or consider the 8.0 LTS-equivalent track. The upgrade path from 8.2 or 8.0 is straightforward — mongod can be upgraded in-place with minimal downtime when using a replica set.