Path Traversal Vulnerability in GuardDog CLI Tool by DataDog
CVE-2026-22871

8.7HIGH

Key Information:

Vendor

Datadog

Status
Guarddog
Vendor
CVE Published:
13 January 2026

What is CVE-2026-22871?

The GuardDog CLI tool, which identifies malicious PyPI packages, contains a path traversal vulnerability in its safe_extract() function, allowing malicious packages to write arbitrary files outside the designated extraction directory. This flaw could potentially enable remote code execution on systems running earlier versions of GuardDog, effectively compromising system integrity. The vulnerability has been addressed in version 2.7.1, emphasizing the importance of updating to safeguard against exploitation.

Affected Version(s)

guarddog < 2.7.1

References

https://github.com/DataDog/guarddog/security/advisories/G...
x_refsource_CONFIRM
https://github.com/DataDog/guarddog/commit/9aa6a725b2c71d...
x_refsource_MISC

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.