Description
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MongoDB | MongoDB Entity Framework Core Provider | 8.0.0 – < 8.4.4, 9.0.0 – < 9.1.4, 10.0.0 – < 10.0.4 | 8.4.4 |
Advisories 1
- WID-SEC-2026-3453 MongoDB C Driver und Entity Framework Core Provider: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026