CVE-2026-18710

Awaiting Analysis Awaiting Analysis - Queue

MongoDB Driver Logs Cleartext Credentials Exposure

Publication date: 2026-08-11

Last updated on: 2026-08-28

Assigner: MongoDB, Inc.

Description

A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application's logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-28

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-18710

Affected Vendors & Products

Vendor	Product	Version / Range
mongodb	mongodb_driver	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

A MongoDB driver component may log sensitive configuration details, including network credentials, in cleartext during normal client initialization. This happens automatically without requiring special access and exposes the credential to anyone with log access.

Detection Guidance

To detect this vulnerability, inspect application logs for MongoDB driver initialization output. Look for cleartext credentials or sensitive configuration details. Check log files in default locations like /var/log/ or application-specific directories. Use commands like grep to search for patterns such as 'password' or 'credential' in logs.

Impact Analysis

If an attacker gains access to your application logs or log storage, they could extract the exposed credential and use it to authenticate to your network infrastructure, potentially leading to unauthorized access or data breaches.

Compliance Impact

This vulnerability could violate compliance requirements that mandate protection of sensitive data, such as GDPR (data confidentiality) or HIPAA (protected health information). Unauthorized credential exposure may result in regulatory penalties or audit failures.

Mitigation Strategies

Immediately review and update MongoDB driver configurations to disable logging of sensitive information. Ensure logs are stored securely with restricted access. Rotate any exposed credentials and monitor for unauthorized access attempts. Apply patches or updates from MongoDB if available.

Hi! I’m here to help you understand CVE-2026-18710. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70