Skip to content
OpenAdvisories

Product · Datadog

dd-trace-java

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-33728

    dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution

    dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and ear…

    Datadog dd-trace-java com.datadoghq:dd-java-agent Maven