Denial of Service Vulnerability in Datadog Vector by Datadog, Inc.
CVE-2026-39197

6.5MEDIUM

Key Information:

Vendor

Datadog, Inc.

Status
Datadog Vector
Vendor
CVE Published:
15 June 2026

What is CVE-2026-39197?

A vulnerability affecting Datadog Vector version 0.54.0 has been identified, which allows attackers to execute a Denial of Service (DoS) attack via the /util/http/prelude.rs endpoint. An attacker can exploit this issue by sending a specially crafted request or payload. This could lead to significant service disruptions, as the targeted system may become unresponsive or crash altogether, impacting availability for legitimate users.

References

https://gist.github.com/pyuysig/221e90dd598ab3f3c3100ae59...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.