CVE-2026-18705
EUVD-2026-5690811.08.2026, 19:17
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mongodb | mongodb | 7.0.0 ≤ 𝑥 < 7.0.40 |
| mongodb | mongodb | 8.0.0 ≤ 𝑥 < 8.0.29 |
| mongodb | mongodb | 8.2.0 ≤ 𝑥 ≤ 8.2.12 |
| mongodb | mongodb | 8.3.0 ≤ 𝑥 < 8.3.8 |
| mongodb | mongodb | 9.0.0:alpha0 |
| mongodb | mongodb | 9.0.0:alpha1 |
| mongodb | mongodb | 9.1.0:alpha0 |
𝑥
= Vulnerable software versions
Ubuntu Releases