Loading...

XML

Word

Printable

JSON

Type: Bug
Resolution: Fixed
Priority: Major - P3
Fix Version/s: 9.1.0-rc0, 8.3.9, 9.0.0-rc2, 9.1.0-rc1024
Affects Version/s: None
Component/s: None
Labels:
- bkp

Assigned Teams:

Query Integration
Backwards Compatibility:
Fully Compatible
Operating System:
ALL
Backport Requested:

v9.0, v8.3
CAR Domain/s:
None

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name(s):
None
Goal Link:
None

Update logic to prevent users from specifying the $_isHybridSearch field at the top level agg request. This prevents downstream security issues like view injection.

is related to

SERVER-131917 Audit command fields for internal-only / external-client validation

In Progress

Assignee:: Adithi Raghavan
Reporter:: Adithi Raghavan
Participants:: Adithi Raghavan, Githook User
Votes:: 0 Vote for this issue
Watchers:: 5 Start watching this issue

Created:: Jul 23 2026 04:28:52 PM UTC
Updated:: Sep 22 2026 09:50:33 PM UTC
Resolved:: Sep 08 2026 04:18:51 PM UTC

Details

Description

Attachments

Issue Links

Activity

People

Dates

PagerDuty