A BSON symbol namespace bypasses MongoDB's authorization check (CVE-2026-18690)

Write your take first — we'll ask for email only when you're ready to publish.