Beaumont’s summary: https://doublepulsar.com/merry-christmas-day-have-a-mongodb-security-incident-9537f54289eb
PoC: GitHub - joe-desimone/mongobleed · GitHub
Additional technical details: MongoDB Unauthenticated Attacker Sensitive Memory Leak
So this is a memory leak issue similar to CitrixBleed. Not direct RCE but secrets exfil possible.
