CVE-2026-39196

Datadog, Inc Vector versions prior to 0.55.0 are vulnerable to a SQL/identifier injection flaw within the ClickHouse sink . The root cause is located in the KeyPartitioner::partition() function, where the software fails to escape the database value, raw-interpolating it into the INSERT statement ...

CVE-2026-39196

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the seturiquery parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

CVE-2026-39196

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:31+00:00| seen| https://gist.github.com/pyuysig/423b15c69e3cd851c1e24c1312a0551a...