CVE-2026-120816 | MongoDB up to 7.0.47/8.0.36/8.3.15/9.0.6 Aggregation Framework privileges management

A vulnerability identified as problematic has been detected in MongoDB MongoDB up to 7.0.47/8.0.36/8.3.15/9.0.6. This issue affects some unknown processing of the component Aggregation Framework. Performing a manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-120816. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More