Medium severity · published May 27, 2026
CVE-2026-44972
GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content
5.0
CVSS
0.1%
EPSS
No
On KEV
Description
GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject ANSI or OSC escape sequences into analyst terminals or CI logs.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GU
guarddog · DataDog
>= 2.6.0, <= 2.9.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-44972
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-44972
github.com
https://github.com/DataDog/guarddog/security/advisories/GHSA-m5p4-gvpx-4mvr
More from guarddog
9.8
CVE-2026-22871
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
8.2
CVE-2026-44971
GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration
7.5
CVE-2026-22870
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS