CVE-2026-9735 describes a vulnerability in MongoDB Server 8.3.0 where, during SASL authentication, the server logs authentication parameters including credentials in cleartext if connection health metric logging is enabled. This results in sensitive information being inserted into log files without redaction, increasing the risk of credential exposure through log access. The vulnerability has a CVSS 4.0 base score of 6.8, indicating a medium severity level. No official patch or remediation guidance is currently provided by the vendor, and no known exploits are reported in the wild.

Sensitive authentication credentials may be exposed in server log files, which could be accessed by unauthorized users with log access privileges. This exposure could lead to credential compromise if logs are not properly secured. The vulnerability requires local access (AV:L) and low privileges (PR:L) but does not require user interaction. The impact is limited to confidentiality as per the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to disable connection health metric logging or restrict access to server logs to trusted administrators only to reduce the risk of credential exposure.