CVE-2026-47362

Name of the Vulnerable Software and Affected Versions Datadog Android application versions prior to 554-5.9.4

Description Two Room-backed SQLite databases store sensitive content in plaintext. The LocalNotificationDatabase contains notification titles, messages, recipients, services, tags, and on-call or incident deep links. The SearchRecentDatabase stores the user's full in-app search history. These databases are stored as cleartext files in /data/data/com.datadog.app/databases/. An actor capable of bypassing the application sandbox—such as through rooted devices, misconfigured android:allowBackup settings, physical device access, or forensic acquisition—can read this operationally sensitive information.

Recommendations Update to version 554-5.9.4 or later.