Executive brief
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
Affected products
- PyPI guarddog
Junglewise Threat Intelligence
CVE-2026-22871: PYSEC-2026-1430 - GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
CVE-2026-22871 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: guarddog (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1429 - GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
- DataDog GuardDog terminal escape injection in scan output
- DataDog GuardDog SSRF and credential disclosure in remote project scanning
- PYSEC-2022-42994 - GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to 0.1.5 are vulnerable to Relative Path Traversal when scanning
- PYSEC-2022-42993 - GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to v0.1.8 are vulnerable to arbitrary file write when scanning a