CVE-2026-47364

MEDIUM 6.5

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own systems.

CWE	CWE-200
Vendor	datadog
Product	android app
Published	Aug 7, 2026
Last Updated	Aug 8, 2026

Stay Ahead of the Next One

Get instant alerts for datadog android app

Be the first to know when new medium vulnerabilities affecting datadog android app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Datadog / Android App

5.9.2 < 5.9.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

cwe.mitre.org: https://cwe.mitre.org/data/definitions/200.html firebase.google.com: https://firebase.google.com/docs/crashlytics/customize-crash-reports?platform=android#enable-opt-in-reporting trust.datadoghq.com: https://trust.datadoghq.com/?tcuUid=2e8b8fa5-39ca-43f4-9f6a-aeafafb440ef

Credits

Mark Esler (https://github.com/eslerm)