CVE-2026-39196

Datadog, Inc Vector versions prior to 0.55.0 are vulnerable to a SQL/identifier injection flaw within the ClickHouse sink . The root cause is located in the KeyPartitioner::partition() function, where the software fails to escape the database value, raw-interpolating it into the INSERT statement ...

CVE-2026-39196: Improper Neutralization of Special Elements used in an SQL Command

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the seturiquery parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

CVE-2026-39196

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the seturiquery parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

PT-2026-49302

Name of the Vulnerable Software and Affected Versions Vector versions prior to 0.55.0 Description The ClickHouse sink contains a SQL/identifier injection flaw. The software escaped the table identifier but interpolated the database value raw into the INSERT statement, allowing a crafted database...