Security Advisory
CVE-2026-13061
4.3
MEDIUM
Vulnerability Description
An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated usernames, and activity timestamps.
Published Date
July 22, 2026
Official Source
NIST NVD Advisory