Is CVE-2026-13061 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-13061?

CVE-2026-13061 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-13061

Description

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated usernames, and activity timestamps.