SERVER-75265 Improve queryable encryption handling in curop

1 files changed, 7 insertions, 4 deletions

diff --git a/src/mongo/db/commands/run_aggregate.cpp b/src/mongo/db/commands/run_aggregate.cpp
index 6f503f0f850..c2f2701cd42 100644
--- a/src/mongo/db/commands/run_aggregate.cpp
+++ b/src/mongo/db/commands/run_aggregate.cpp
@@ -1012,10 +1012,13 @@ Status runAggregate(OperationContext* opCtx,
         // support querying against encrypted fields.
         if (shouldDoFLERewrite(request)) {
             CurOp::get(opCtx)->debug().shouldOmitDiagnosticInformation = true;
-            // After this rewriting, the encryption info does not need to be kept around.
-            pipeline = processFLEPipelineD(
-                opCtx, nss, request.getEncryptionInformation().value(), std::move(pipeline));
-            request.setEncryptionInformation(boost::none);
+
+            if (!request.getEncryptionInformation()->getCrudProcessed().value_or(false)) {
+                pipeline = processFLEPipelineD(
+                    opCtx, nss, request.getEncryptionInformation().value(), std::move(pipeline));
+                request.getEncryptionInformation()->setCrudProcessed(true);
+            }
+
             // Set the telemetryStoreKey to none so telemetry isn't collected when we've done a FLE
             // rewrite.
             CurOp::get(opCtx)->debug().telemetryStoreKey = boost::none;