CVE-2026-47362 Details

A vulnerability exists in the Datadog Android application due to the insecure storage of operationally sensitive information in plaintext SQLite databases managed by Room. Two specific databases were identified as problematic: the LocalNotificationDatabase, which contains sensitive notification details, and the SearchRecentDatabase, which records user search queries within the app. The absence of encryption leaves this data exposed, relying solely on the Android application sandbox for protection. This vulnerability is particularly concerning given the nature of the stored information, which includes customer monitoring data and incident-related details. Exploitation could occur through various means, such as on rooted or jailbroken devices, improper adb backup configurations, physical device transfers, or forensic data recovery.