Beveiligingsadvies

CVE-2026-18705

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-11 18:37:54
Laatst bijgewerkt 2026-08-11 20:25:24
Toegewezen door mongodb
CVSS-score 7.1
Status PUBLISHED

Beschrijving

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.