VYPR
Medium severity5.4NVD Advisory· Published Oct 13, 2026· Updated Oct 13, 2026

CVE-2026-103965

CVE-2026-103965

Description

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.