CVE-2026-75573

score

0.1

cvss

4.4

epss

0.1%

published

2026-08-27

kev added

—

first seen

2026-10-21

MongoDB Connector for BI mongodrdl contains an information disclosure caused by writing TLS private-key password to standard error when supplied via both connection URI and command-line option, letting local users access TLS client key, exploit requires local access to command output and encrypted key file.