Entity queries must explicitly set whether the query should be access checked or not.

That is an issue with a contributed or custom module that does not call accessCheck() on the query object, which is now mandatory.

If you get the stack trace you will know which module did this.

It was from a custom module, where we were gathering published nodes and sort them by Title. Thank you!

Automatically closed - issue fixed for 2 weeks with no activity.