CVE-2026-82073

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description A security issue in the aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks. This occurs when Atlas Search features are active, enabling access to data from unauthorized collections. The flaw is caused by insufficient validation of an internal command parameter that can be modified by external clients, which results in the security check being improperly skipped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.