CVE-2026-39196: SQL Injection
Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the seturiquery parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Datadog Vector v0.54.0from your environment.Uninstall or remove Datadog Vector v0.54.0 from affected systems if it is not required.
- Configuration
Disable the set_uri_query parameter to prevent user-supplied query data from being used by KeyPartitioner::partition (mitigates the SQL injection vector).
Datadog Vector set_uri_query = disabled - Compensating control
Restrict network access from Vector instances to backend databases using firewall rules or ACLs, and deploy input validation/WAF rules to block crafted SQL in request parameters that could reach set_uri_query.
- Operational
Audit database logs for suspicious queries that may have originated from Vector and rotate any database credentials that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-39196?
CVE-2026-39196 has a critical severity score of 9.8 on the CVSS scale.
How do I fix CVE-2026-39196?
To mitigate CVE-2026-39196, update Datadog Vector to the latest patched version.
What type of vulnerability is CVE-2026-39196?
CVE-2026-39196 is a SQL injection vulnerability that allows unauthorized access to database information.
Which software is affected by CVE-2026-39196?
CVE-2026-39196 affects Datadog Vector version 0.54.0.
What could be the impact of exploiting CVE-2026-39196?
Exploitation of CVE-2026-39196 could allow attackers to access sensitive database information through crafted SQL statements.