← CVE Intelligence

CVE-2026-8200

Schema validation log messages may not redact user data PUBLISHED

Description (CNA)

When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have all user data redacted.  This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.

Affected (CNA)

Vendor / productVersions
MongoDB, Inc. / MongoDB Serveraffected 7.0 before 7.0.34; affected 8.0 before 8.0.23; affected 8.2 before 8.2.9; affected 8.3 before 8.3.2

CWE

CWE-532

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.