CVE-2026-9735

Analyzed Analyzed - Analysis Complete

MongoDB Server Logs Authentication Credentials in SASL Authentication

Publication date: 2026-06-09

Last updated on: 2026-06-15

Assigner: MongoDB, Inc.

Description

MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-09

Last Modified

2026-06-15

Generated

2026-06-30

AI Q&A

2026-06-10

EPSS Evaluated

2026-06-28

NVD

CVE-2026-9735

EUVD

EUVD-2026-35856

Affected Vendors & Products

Vendor	Product	Version / Range
mongodb	mongodb	From 8.3.0 (inc) to 8.3.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Compliance Impact

This vulnerability causes MongoDB server to log authentication parameters, including credentials, in server logs without redaction when connection health metric logging is enabled. This exposure of sensitive authentication data in logs can lead to unauthorized access or data breaches.

Such exposure of sensitive credentials in logs can negatively impact compliance with common standards and regulations like GDPR and HIPAA, which require protection of personal and sensitive data, including secure handling and storage of authentication information.

Executive Summary

This vulnerability occurs in the MongoDB server where, during SASL authentication, authentication parameters including credentials may be logged to the server log.

When connection health metric logging is enabled, the full authentication parameters are written to the log without any redaction, potentially exposing sensitive information.

Impact Analysis

The vulnerability can lead to sensitive authentication credentials being exposed in server logs.

If an attacker gains access to these logs, they could retrieve authentication details, potentially compromising the security of the MongoDB server and its data.

Hi! I’m here to help you understand CVE-2026-9735. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70