CVE-2026-75573

Name of the Vulnerable Software and Affected Versions MongoDB Connector for BI (affected versions not specified)

Description In the mongodrdl component, a TLS private-key password may be written to standard error if the password is provided via both the connection URI and the associated command-line option. A local user who has access to the captured command output and the encrypted key file can use this disclosed password to access the TLS client key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.