CVE-2026-18710: CWE-532: Insertion of Sensitive Information into Log File in MongoDB MongoDB Driver
CVE-2026-18710 is a high-severity vulnerability in MongoDB Driver version 4.11.0 where sensitive configuration information, including credentials for outbound network connectivity, is logged in cleartext during normal client initialization. This exposure requires no special privileges to trigger and could allow an attacker with access to application logs or log aggregation systems to obtain and reuse these credentials. The issue impacts confidentiality only.
AI Analysis
Technical Summary
The MongoDB Driver version 4.11.0 contains a vulnerability classified as CWE-532, where sensitive information such as credentials used for outbound network connections is automatically written in cleartext to application logs during routine client initialization. This logging occurs without requiring special privileges, making it possible for any party with access to the logs or downstream log storage to extract these credentials and potentially authenticate to the associated network infrastructure. The vulnerability affects confidentiality but does not impact integrity or availability.
Potential Impact
An attacker who can read the affected application's logs or any downstream log aggregation storage can recover sensitive credentials used by the MongoDB Driver for outbound network connectivity. This could lead to unauthorized authentication to network infrastructure associated with the credential. The vulnerability does not affect system integrity or availability, only confidentiality.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is documented at this time. Until a patch is available, restrict access to application logs and log aggregation systems to trusted personnel only to reduce the risk of credential exposure.
CVE-2026-18710: CWE-532: Insertion of Sensitive Information into Log File in MongoDB MongoDB Driver
Description
CVE-2026-18710 is a high-severity vulnerability in MongoDB Driver version 4.11.0 where sensitive configuration information, including credentials for outbound network connectivity, is logged in cleartext during normal client initialization. This exposure requires no special privileges to trigger and could allow an attacker with access to application logs or log aggregation systems to obtain and reuse these credentials. The issue impacts confidentiality only.
CVSS v4.0
Score 8.2high
Affected software
pkg:maven/org.mongodb/mongodb-driverRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The MongoDB Driver version 4.11.0 contains a vulnerability classified as CWE-532, where sensitive information such as credentials used for outbound network connections is automatically written in cleartext to application logs during routine client initialization. This logging occurs without requiring special privileges, making it possible for any party with access to the logs or downstream log storage to extract these credentials and potentially authenticate to the associated network infrastructure. The vulnerability affects confidentiality but does not impact integrity or availability.
Potential Impact
An attacker who can read the affected application's logs or any downstream log aggregation storage can recover sensitive credentials used by the MongoDB Driver for outbound network connectivity. This could lead to unauthorized authentication to network infrastructure associated with the credential. The vulnerability does not affect system integrity or availability, only confidentiality.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is documented at this time. Until a patch is available, restrict access to application logs and log aggregation systems to trusted personnel only to reduce the risk of credential exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mongodb
- Date Reserved
- 2026-08-03T15:55:10.732Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7b9e69bf8831d5397e8729
Added to database: 08/11/2026, 22:12:57 UTC
Last enriched: 08/11/2026, 22:26:27 UTC
Last updated: 08/12/2026, 02:01:26 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.