Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-6915

Flaw in the updateUser Command May Allow Unauthorized Configuration Change

Description

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB MongoDB Server

Default version status: unaffected

  • 8.2.0 to < 8.2.7affected
  • 8.0.0 to < 8.0.21affected
  • 7.0.0 to < 7.0.32affected

References