CVE-2026-6915
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account.
Published Apr 29, 2026 · updated Jun 17, 2026 · mongodb mongodb
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 29, 2026 · NIST NVD
Detected
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
Jun 17, 2026 · NIST NVD
Updated
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
Affected
- cpe mongodb/mongodbversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-6915
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-6915
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
nvd.nist.gov