CVE-2026-18710 Cleartext Storage of Sensitive Information in MongoDB Driver Logging During Client Initialization
An attacker with log access can recover cleartext credentials from MongoDB driver logs, enabling unauthorized network authentication.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-18710?
CVE-2026-18710 is a high-severity vulnerability in MongoDB Driver, published on 11 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application's logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.
Weakness: CWE-532
Which versions are affected by CVE-2026-18710?
It affects 1 product.
Products include Mongodb Java Driver.
How do I fix CVE-2026-18710?
No fix has been published for CVE-2026-18710 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-18710 being exploited?
There is no known exploitation of CVE-2026-18710 in the wild and no public exploit code.
Other vulnerabilities in MongoDB Driver
- CVE-2026-88032 Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver
- CVE-2021-20328 MongoDB Java driver client-side field level encryption not verifying KMS host name
- CVE-2026-88033 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver
Sources
Also known as UBUNTU-CVE-2026-18710.