THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-18705 (MEDIUM 6.5) — An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields

[NVD] CVE-2026-18705 (MEDIUM 6.5) — An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields

mednvdPublished 2026-08-11

CVE-2026-18705 CVSS: 6.5 MEDIUM Published: 2026-08-11T19:17:25.207

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to

Indicators of compromise

CVE-2026-18705cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18705