CVE-2026-18710

Name of the Vulnerable Software and Affected Versions MongoDB driver (affected versions not specified)

Description A component of the driver may write sensitive configuration data, such as credentials used for outbound network connectivity, in cleartext to the application log output during routine client initialization. This process happens automatically during normal operation and does not require special privileges. An attacker with access to the application logs or log-aggregation storage could recover these credentials to authenticate to the associated network infrastructure, impacting confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.