This vulnerability (CWE-757) in MongoDB Server's intra-cluster connection negotiation allows an attacker with suitable network access to influence the authentication mechanism used between replica set members. Under certain conditions, this can cause the cluster's shared internal credential to be transmitted using a less-secure algorithm, potentially enabling the attacker to recover the credential. If the credential is recovered, it can be used to authenticate as the internal superuser to nodes within the deployment, compromising cluster security.

An attacker with network access to the MongoDB cluster can cause the internal superuser credential to be transmitted in a less-protected form, potentially allowing credential recovery. This would enable the attacker to authenticate as the internal superuser on any node in the cluster, leading to full control over the deployment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Until a fix is available, restrict network access to intra-cluster communication channels to trusted parties only.