Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Datadog Vector SQL Injection Vulnerability in Database Queries

CVE-2026-39196 · published 4 months ago
Summary

The vulnerability in Datadog Vector allows attackers to access sensitive database information. This is a serious issue because it could lead to unauthorized access to your database, potentially exposing sensitive data. To protect yourself, update to the latest version of Datadog Vector.

Original advisory text
Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the set_uri_query parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to ...
Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the set_uri_query parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published15 Jun 2026
Updated4 Nov 2026
First seen15 Jun 2026
Sources
CVE-2026-39196 · NVD
Track software like this
Free during beta