CVE-2026-13068
Received Received - Intake

Authenticated Cursor Termination Privilege Escalation in MongoDB

Publication date: 2026-07-22

Last updated on: 2026-07-22

Assigner: MongoDB, Inc.

Description
An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-22
Last Modified
2026-07-22
Generated
2026-07-23
AI Q&A
2026-07-22
EPSS Evaluated
N/A
NVD
CVE-2026-13068
EUVD
EUVD-2026-47793

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an authenticated user with cursor termination privileges on one database to incorrectly terminate active cursors on a separate database. This disrupts ongoing query operations for other users due to an authorization check that fails to scope privileges correctly to the appropriate namespace.

Impact Analysis

This vulnerability can cause disruptions in database operations by terminating active cursors used by other users. This may lead to incomplete or failed queries, impacting performance and availability of the database for legitimate users.

Mitigation Strategies

Review and restrict cursor termination privileges to ensure they are scoped to the correct database namespace. Apply patches or updates if available from the vendor.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-13068. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart