High severity · published May 27, 2026
CVE-2026-44971
GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration
8.2
CVSS
0.2%
EPSS
No
On KEV
Description
GuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the programmatic remote project scanning path rewrites attacker-controlled repository URLs using a blind string replacement and then sends the caller's GitHub credentials with the resulting request. This allows an attacker who can influence the scanned repository URL to trigger SSRF and capture the GH_TOKEN used by GuardDog. This vulnerability is fixed in .
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GU
guarddog · DataDog
>= 1.0.0, <= 2.9.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-44971
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-44971
github.com
https://github.com/DataDog/guarddog/security/advisories/GHSA-587r-mc96-6f2p
More from guarddog
9.8
CVE-2026-22871
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
7.5
CVE-2026-22870
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
5.0
CVE-2026-44972
GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content