CVE-2025-6711: Incomplete Redaction of Sensitive Information in MongoDB Server Logs
An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered. This issue affects MongoDB Server v8.0 versions prior to 8.0.5, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v6.0 versions prior to 6.0.21.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MongoDB Serverto a version that resolves this vulnerability.Fixed in 8.0.5 - Upgrade
Upgrade
MongoDB Serverto a version that resolves this vulnerability.Fixed in 7.0.18 - Upgrade
Upgrade
MongoDB Serverto a version that resolves this vulnerability.Fixed in 6.0.21
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6711?
CVE-2025-6711 has been classified with a severity level that warrants immediate attention due to potential data exposure risks.
How do I fix CVE-2025-6711?
To fix CVE-2025-6711, upgrade your MongoDB Server to version 8.0.5 or higher, or to version 7.0.18 or higher.
Which MongoDB Server versions are affected by CVE-2025-6711?
CVE-2025-6711 affects MongoDB Server versions 8.0 prior to 8.0.5, 7.0 prior to 7.0.18, and 6.0 prior to 6.0.21.
What are the risks associated with CVE-2025-6711?
The risks include the potential exposure of unredacted queries in server logs which can lead to sensitive information leakage.
Is there a workaround for CVE-2025-6711?
There is no documented workaround for CVE-2025-6711, thus upgrading to the safe versions is strongly recommended.