一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月9日

CVE-2026-82073 [MEDIUM] – A security issue in the MongoDB Server aggregation framework allows an authenticated user

未分类
📑 文章目录

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an internal command parameter that can be set by external clients, causing a security check to be improperly skipped.