CVE-2026-92758: Logs may collect sensitive information
Published Sep 17, 2026
·Updated
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.
Event History
Sep 17, 2026
CVE Published
via MITRE·07:16 PM
Data Sourced
via MITRE·07:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vector is local and requires low privileges. No user interaction is required.
2
Which configurations can cause sensitive information to be written to logs?
Logging mode set to DEBUG can cause this behavior. A malformed MongoDB connection string can also result in sensitive information being collected in application logs.
3
What sensitive data may be exposed?
Application logs may contain passwords and AWS secure access keys, where those values are in use.