PT-2026-2805 · Guarddog · Guarddog

Dwbruijn · Published 2026-01-13 · Updated 2026-01-21 · CVE-2026-22871

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GuardDog versions prior to 2.7.1

Description GuardDog is a command-line interface (CLI) tool used to identify malicious PyPI packages. A path traversal flaw exists in the safe extract() function, potentially allowing malicious PyPI packages to write files to locations outside the intended extraction directory. This could lead to arbitrary file overwrite and remote code execution. The vulnerable function is safe extract().

Recommendations Update GuardDog to version 2.7.1 or later.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-22871

GHSA-XG9W-VG3G-6M68

Affected Products

Guarddog

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22871.json · Exploit
• https://github.com/DataDog/guarddog/commit/9aa6a725b2c71d537d3c18d1c15621395ebb879c · Patch
• https://osv.dev/vulnerability/GHSA-xg9w-vg3g-6m68 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-22871 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22871 · Security Note
• https://github.com/DataDog/guarddog · Note
• https://github.com/DataDog/guarddog/security/advisories/GHSA-xg9w-vg3g-6m68 · Note
• https://t.me/cveNotify/149430 · Telegram Post
• https://twitter.com/CVEnew/status/2011759652866822266 · Twitter Post