CVE-2026-13057

CVE-2026-13057 affects the server’s Atlas Search integration (MongoDB) in sharded topologies. An authenticated client can bypass per-user access controls by supplying internal routing fields for the $search and $searchMeta aggregation stages, which are normally populated only by the trusted route...