CVE-2026-47362: SQL Injection
In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification title, message, recipient, service, tags, and on-call/incident deep links) and SearchRecentDatabase (the user's full in-app search history). Impact: Any actor able to bypass the app sandbox can read these databases in plaintext.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Datadog Android applicationto a version that resolves this vulnerability.Fixed in v554-5.9.4 - Configuration
Upgrade to a Datadog Android app version at or after v554-5.9.4 so LocalNotificationDatabase and SearchRecentDatabase no longer store sensitive content in plaintext.
Datadog Android application (Room-backed SQLite databases) LocalNotificationDatabase & SearchRecentDatabase encryption = encrypted (avoid plaintext at rest)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47362?
CVE-2026-47362 has a risk rating of 37.
How does CVE-2026-47362 affect the Datadog Android application?
CVE-2026-47362 allows operationally sensitive content to be stored in plaintext SQLite databases, potentially exposing sensitive information.
What components of the Datadog Android application are impacted by CVE-2026-47362?
CVE-2026-47362 affects the LocalNotificationDatabase and the SearchReceivedDatabase.
How do I fix CVE-2026-47362 in the Datadog Android application?
To fix CVE-2026-47362, it is recommended to encrypt the SQLite databases used by the application.
What kind of data is at risk in CVE-2026-47362?
CVE-2026-47362 exposes operationally sensitive data like notification messages, recipient details, and on-call incident links.