CVE-2026-81530
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material to be reproduced verbatim in the driver's human-readable diagnostic representation of client settings, instead of being masked as other secret fields are.
Risk Assessment
A party able to read logs, diagnostic output, or a process memory dump may recover plaintext credentials and use them to decrypt protected field data, leading to confidentiality breach.
Recommendation
Upgrade the MongoDB C# Driver to a patched version that masks such data. Avoid logging full client settings and secure access to logs and memory dumps.
Original NVD description (English source)
A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked as other secret fields are. A party able to read the application's logs, diagnostic output, or a process memory dump may thereby recover the plaintext credentials and use them to decrypt protected field data.