by Kastro
Paper/Archive/CVE-2026-22871

CVE-2026-22871

DataDog guarddog — GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.7.647 × 2012.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, there is a path traversal vulnerability exists in GuardDog's safe_extract() function that allows malicious PyPI packages to write arbitrary files outside the intended extraction directory, leading to Arbitrary File Overwrite and Remote Code Execution on systems running GuardDog. This vulnerability is fixed in 2.7.1.

Affected

ProductAffectedFixed inSource
guarddog< 2.7.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub_M (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/DataDog/guarddog/security/advisories/GHSA-xg9w-vg3g-6m68refgithub.com/DataDog/guarddog/commit/9aa6a725b2c71d537d3c18d1c15621395ebb879c