CVE-2026-105805

Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.88.0 Payload canary versions prior to 4.0.0-canary.27

Description An untrusted user can infer limited information about protected field values they are not permitted to read. This occurs when a user can query a readable collection and control the sorting by selecting a protected field as the sort parameter.

Recommendations Update to version 3.88.0 or later. Update to canary version 4.0.0-canary.27 or later. Prevent untrusted users from controlling sort parameters. Restrict user access to affected collections.