CVE-2026-18705

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue in the Atlas Vector Search feature allows an authenticated user with read access to one view to retrieve documents from a different, protected view sharing the same underlying collection. This occurs because of insufficient handling of user-supplied fields during the construction of internal requests forwarded to the search process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.