Vulnerabilities

TI-2026-52893 CVE-2026-75573 · GHSA-gq2v-frgg-2m9q

MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied

LOW 18

In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option.

CVSS 4.0MEDIUM 4.1 Local Low privileges User interaction EPSS 0.00119 Published 2026-08-27 Fixed in 2.14.30 CWE-532

TI-2026-52807 CVE-2026-75159 · GHSA-wwh3-vv7v-5w28

MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

LOW 36

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00477 Published 2026-08-27 Fixed in 2.14.30 CWE-415

Vulnerabilities

Filters

MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied

MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination