CVE-2026-6915

MEDIUM severity · CVSS 6.3 · CWE-1284

6.3CVSS MEDIUM

Summary

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredLow

User interactionNone

Confidentiality impactLow

Integrity impactLow

Availability impactLow

Exploit probability (EPSS)0%

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products we track (1)

MongoDB

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: https://jira.mongodb.org/browse/SERVER-119679 ↗

Additional information

NVD record
https://jira.mongodb.org/browse/SERVER-119679Patch