CVE-2026-19502

Name of the Vulnerable Software and Affected Versions MongoDB SQL Schema Builder CLI (affected versions not specified)

Description The application records its startup configuration to standard output and, if file logging is enabled, to a log file on disk. Certain connection settings are written without redaction, allowing authentication material provided by the operator to appear in plaintext within the diagnostic output. A local user with read access to the terminal session or the log directory, or any entity with access to the log collection location, could obtain these sensitive values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.