From e6f6b43376c9a1ef2e1c320fee8c806526d27974 Mon Sep 17 00:00:00 2001
From: Jeffrey 'Alex' Clark <alex.clark@mongodb.com>
Date: Thu, 10 Sep 2026 15:56:29 -0400
Subject: [PATCH] Update changelog for CVE-2026-88029 reference [main]

---
 doc/changelog.rst | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/doc/changelog.rst b/doc/changelog.rst
index 00a9b83c34..41e6dee233 100644
--- a/doc/changelog.rst
+++ b/doc/changelog.rst
@@ -13,6 +13,16 @@ Bug fixes
 
 .. _PYTHON-6074: https://jira.mongodb.org/browse/PYTHON-6074
 
+Changes in Version 4.18.1 (2026/09/10)
+--------------------------------------
+
+Version 4.18.1 is a bug fix release.
+
+- Use an exact match for the file ID in GridFS delete methods
+  (`CVE-2026-88029`_).
+
+.. _CVE-2026-88029: https://www.cve.org/CVERecord?id=CVE-2026-88029
+
 Changes in Version 4.18.0 (2026/09/03)
 --------------------------------------