GuardDog, a CLI tool that scans remote projects, rewrites attacker‑controlled repository URLs with a blind string replacement and then sends the caller’s GitHub credentials in the resulting request. This flaw (CWE‑918) permits an attacker who can influence the URL argument to trigger Server‑Side Request Forgery, causing GuardDog to reach internal or third‑party endpoints, and to capture the GH_TOKEN that GuardDog transmits. The exposed token can be used to impersonate the user on GitHub, granting unauthorized access to repositories and potentially leading to further compromise.

DataDog’S GuardDog CLI, versions 1.0.0 through 2.9.0, is affected. The fix has not been released yet.

The CVSS score is 8.2, indicating high severity. The EPSS score is not available, so the current exploitation probability is unknown. GuardDog is not listed in the CISA KEV catalog. Exploitation requires the attacker to control the repository URL parameter used in a GuardDog scan, which may be achievable in automated CI/CD pipelines or when the tool is invoked by users who supply arbitrary URLs. Once the SSRF is triggered, the attacker can obtain the GH_TOKEN and potentially access protected resources.