← CVE Intelligence

CVE-2026-9751

Sensitive data could be written to mongod.log PUBLISHED

Description (CNA)

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.

Affected (CNA)

Vendor / productVersions
MongoDB / MongoDB Serveraffected 8.3.0 before 8.3.3; affected 8.2.0 before 8.2.10; affected 8.0.0 before 8.0.24; affected 7.0.0 before 7.0.35

CWE

CWE-532

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.