diff --git a/.changelog/21950.txt b/.changelog/21950.txt
new file mode 100644
index 0000000000..e15f9d6c80
--- /dev/null
+++ b/.changelog/21950.txt
@@ -0,0 +1,3 @@
+```release-note:security
+Removed ability to use bexpr to filter results without ACL read on endpoint
+```
\ No newline at end of file