MEDIUM6.8CVE-2026-55837dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens from 0, < 1.20.0
MEDIUM6.8CVE-2026-55837dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens from 0, < 1.20.0
MEDIUM6.3CVE-2026-44968dbt MCP Server has an Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters from 0, < 1.17.1
MEDIUM6.3dbt MCP Server has an Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters
from 0, < 1.17.1
LOW3.1dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction
from 0, < 1.17.1
LOW3.1dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction
from 0, < 1.17.1
LOW2.5dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled
from 0, < 1.17.1
LOW2.5dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled
from 0, < 1.17.1