CVE-2026-82074

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An incorrect authorization issue exists within the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that tricks the server's authorization subsystem into evaluating a different operation than the one actually executed. This allows unauthorized read access to collection data within the target database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.