CVE-2026-120806

A flaw in MongoDB Server 's user management commands leads to incomplete cleanup of role authorization data during drop operations. Due to incorrect internal query predicates , dropping a role removes the definition but leaves stale references in user and role documents. If a role with the same n...