Sensitive Configuration Exposure in MongoDB Driver Component

CVE-2026-18710

What is CVE-2026-18710?

A vulnerability in the MongoDB driver component allows sensitive configuration details to be logged in plaintext during standard client initialization. This automatic logging process occurs without any special user permissions, enabling unauthorized parties to access application logs or downstream log-aggregation systems. As a result, exposed credentials could potentially be exploited to gain unauthorized access to the associated network infrastructure, thus jeopardizing the confidentiality of sensitive information.

References