CVE-2026-75573
CVE-2026-75573
In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclosed password to access the associated TLS client key.
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-75573?
- CVE-2026-75573 is a medium-severity vulnerability, classified under Insertion of Sensitive Information into Log File. CVSS score: 4.4/10. Published 2026-08-27.
- How severe is CVE-2026-75573?
- Medium severity. CVSS v3 base score is 4.4 out of 10.