CVE-2026-75573 MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied
Local attackers can read TLS private-key passwords from logs when duplicate options are used, potentially accessing encrypted keys.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-75573?
CVE-2026-75573 is a medium-severity vulnerability in MongoDB BI Connector, published on 27 Aug 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclosed password to access the associated TLS client key.
Weakness: CWE-532
Which versions are affected by CVE-2026-75573?
It affects 1 product.
Products include Mongodb Bi Connector.
How do I fix CVE-2026-75573?
No fix has been published for CVE-2026-75573 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-75573 being exploited?
There is no known exploitation of CVE-2026-75573 in the wild and no public exploit code.
Other vulnerabilities in MongoDB BI Connector
- CVE-2026-81517 MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service
- CVE-2026-81518 BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections
- CVE-2026-81520 MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection Exhaustion
- CVE-2026-77586 MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output
- CVE-2026-81490 MongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL Service
Sources
Also known as GHSA-gq2v-frgg-2m9q.