Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

PT-2026-70852

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in the applyOps command allows an authenticated user with specific non-default privileges to perform unauthorized data-definition operations, such as dropping or modifying...