CVE-2026-120822

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue exists where the server may omit an authorization check on the resource targeted by a replication-related administrative command. This occurs because the check relies on a value provided within the client request. Consequently, a user with backup and restore privileges can read and relocate collections they are not permitted to access, leading to unauthorized data access and unintended modifications to the collection catalog.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.