CVE-2026-9735: Keyfile contents are in MongoDB Server logs
Published Jun 9, 2026
·Updated
MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction.
Affected Software
1 affected component
MongoDB MongoDB Server
Event History
Jun 9, 2026
CVE Published
via MITRE·10:40 PM
Data Sourced
via MITRE·10:40 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Apr 18, 58409
Event
via NVD·06:12 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-9735?
The severity of CVE-2026-9735 is medium with a score of 5.5.
2
What does CVE-2026-9735 expose?
CVE-2026-9735 exposes keyfile contents and authentication parameters in MongoDB server logs.
3
How do I fix CVE-2026-9735?
To fix CVE-2026-9735, disable connection health metric logging or ensure proper log file access controls are in place.
4
Which software is affected by CVE-2026-9735?
CVE-2026-9735 affects MongoDB Server.
5
What are the potential risks associated with CVE-2026-9735?
The potential risks include unauthorized access to sensitive credentials logged in the MongoDB server logs.