Medium severity4.2NVD Advisory· Published Jul 22, 2026· Updated Aug 5, 2026
CVE-2026-13068
CVE-2026-13068
Description
An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- jira.mongodb.org/browse/SERVER-128198nvdVendor AdvisoryIssue TrackingPatch
News mentions
0No linked articles in our index yet.