7.81.3 Thu, Jul 30
# Agent ### Prelude Released on: 2026-07-30 - Please refer to the [7.81.3 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7813) for the list of changes on the Core Checks ### Bug Fixes - Windows: Fixed an issue where the `DDAGENTUSER_KEEP_RIGHTS` opt-out was not preserved when the Agent was upgraded through Fleet Automation.
7.81.2 Wed, Jul 22
# Agent ### Prelude Released on: 2026-07-22 - Please refer to the [7.81.2 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7812) for the list of changes on the Core Checks ### Upgrade Notes - Metrics now use the Datadog v3 intake by default for Datadog destinations.
7.81.1 Wed, Jul 15
# Agent ### Prelude Released on: 2026-07-15 - Please refer to the [7.81.1 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7811) for the list of changes on the Core Checks ### New Features - Add a new reflector-based Kubernetes event collection path, enabled via `event_collection_mode: watch`. ### Enhancement Notes - Agents are now built with Go `1.26.5`.
7.81.0 Wed, Jul 8
# Agent ### Prelude Released on: 2026-07-08 - Please refer to the [7.81.0 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7810) for the list of changes on the Core Checks Metrics are now forwarded to the new Datadog v3 API by default (`/api/intake/metrics/v3/series`). The v3 API payload format is more compact, reducing outbound bandwidth from Agents to Datadog.
HIGH 7.4 CVE-2026-61581 Tue, Jul 7
### Impact The Datadog Single Step Instrumentation (SSI) injector (`datadog-apm-inject`) in the affected versions stores some helper tooling in a predictable directory on the host filesystem. A local unprivileged attacker with shell access to the same host can use this to execute code with the privileges of the instrumented Java service process in certain circumstances..
GHSA-h8qx-4jh5-pf43
CVE-2026-61581
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (7.4)
datadog-apm-inject affected: < 0.66.0 patched: >= 0.66.0
7.80.4 Wed, Jul 1
# Agent ### Prelude Released on: 2026-07-01 - Please refer to the [7.80.4 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7804) for the list of changes on the Core Checks ### Bug Fixes - Add more traces during SSI installation on Linux host # Datadog Cluster Agent ### Prelude Released on: 2026-07-01 Pinned to datadog-agent v7.80.4: [CHANGELOG](https://github.com/DataDog/datadog-agent/blob/main/CHANGELOG.rst#7804).
7.80.3 Wed, Jun 24
# Agent ### Prelude Released on: 2026-06-24 - Please refer to the [7.80.3 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7803) for the list of changes on the Core Checks ### Enhancement Notes - Agents are now built with Go `1.25.11`.
7.80.2 Wed, Jun 17
# Agent ### Prelude Released on: 2026-06-17 - Please refer to the [7.80.2 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7802) for the list of changes on the Core Checks ### Enhancement Notes - Compliance: CIS Docker rules (`scope: docker`) are no longer evaluated on Kubernetes nodes where the kubelet's CRI runtime is not Docker (e.g.
7.80.1 Fri, Jun 12
7.80.0 Thu, Jun 11
# Agent ### Prelude Released on: 2026-06-11 - Please refer to the [7.80.0 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7800) for the list of changes on the Core Checks ### Upgrade Notes - Health Platform: the `ReportIssue` method now takes a single `IssueReport` argument instead of `(checkID, checkName string, report *IssueReport)`.
7.79.2 Wed, Jun 3
# Agent ### Prelude Released on: 2026-06-03 - Please refer to the [7.79.2 tag on integrations-core](https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7792) for the list of changes on the Core Checks ### Security Notes - Bumped containerd dependencies to mitigate CVE-2026-46680: `github.com/containerd/containerd` to v1.7.32 and pinned `github.com/containerd/containerd/v2` to v2.0.9 (the EOL v2.1.x line has no fix).
HIGH 7.0 CVE-2025-61667 Tue, Nov 11
A vulnerability within the Datadog Linux Host Agent versions >=7.65.0 to <=7.70.2 exists due to insufficient permissions being set on the `opt/datadog-agent/python-scripts/__pycache__` directory during installation. Code in this directory is only run by the Agent during Agent install/upgrades. This could allow an attacker with local access to modify files in this directory, which would then subsequently be run when the Agent is upgraded, resulting in local privilege escalation.
GHSA-6852-76c5-6cmg
CVE-2025-61667
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (7)
datadog-agent affected: >= 7.65.0 , <= 7.70.2 patched: >= 7.71.0