CVE-2026-13059

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An authenticated user with low privileges can perform unauthorized reads and writes on data protected by role-based query-level access controls. This occurs due to insufficient validation of client-supplied command parameters. The issue specifically affects the find, update, delete, and aggregate commands when used in non-apiStrict configurations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.