CVE-2026-57522 | bitwarden server 1.35.1/2026.4.0/2026.4.1 Datadog Endpoint IntegrationTemplateProcessor.ReplaceTokens injection

June 26, 2026 Yanac

A vulnerability classified as critical has been found in bitwarden server 1.35.1/2026.4.0/2026.4.1. The impacted element is the function IntegrationTemplateProcessor.ReplaceTokens of the component Datadog Endpoint. The manipulation leads to injection.

This vulnerability is documented as CVE-2026-57522. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More