CVE Explorer

CVE-2026-44970

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized every MCP tool call's complete arguments dictionary and sent it through dbtlabs_vortex.producer.log_proto without redaction, including sql_query from show, vars from run, build, and test, and node_selection from compile, while usage_tracking_enabled in settings.py enabled telemetry by default unless DBT_SEND_ANONYMOUS_US

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c9d5c7a8994a146d7ca715f22aa2b2625a2a02e2f06b0bb12960380d608bc730

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"dbt-mcp","vendor":"dbt-labs","versions":[{"status":"affected","version":"< 1.17.1"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6c5fd7320a36acf460872f90e27408ccfd18dcfbdf04271a20dc8c6c866a9332 · sha256:813fe3dbdd3816e1… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:6c5fd7320a36acf460872f90e27408ccfd18dcfbdf04271a20dc8c6c866a9332 · sha256:813fe3dbdd3816e1… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-201","description":"CWE-201: Insertion of Sensitive Information Into Sent Data","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:6c5fd7320a36acf460872f90e27408ccfd18dcfbdf04271a20dc8c6c866a9332 · sha256:813fe3dbdd3816e1… · /containers/cna/problemTypes/0/descriptions/0

Source references

5 source assertions

{"name":"https://github.com/dbt-labs/dbt-mcp/commit/6534507b5e7a729758d5baece155602cad0bb22f","tags":["x_refsource_MISC"],"url":"https://github.com/dbt-labs/dbt-mcp/commit/6534507b5e7a729758d5baece155602cad0bb22f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6c5fd7320a36acf460872f90e27408ccfd18dcfbdf04271a20dc8c6c866a9332 · sha256:813fe3dbdd3816e1… · /containers/cna/references/2

{"name":"https://github.com/dbt-labs/dbt-mcp/pull/752","tags":["x_refsource_MISC"],"url":"https://github.com/dbt-labs/dbt-mcp/pull/752"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6c5fd7320a36acf460872f90e27408ccfd18dcfbdf04271a20dc8c6c866a9332 · sha256:813fe3dbdd3816e1… · /containers/cna/references/1

{"name":"https://github.com/dbt-labs/dbt-mcp/releases/tag/v1.17.1","tags":["x_refsource_MISC"],"url":"https://github.com/dbt-labs/dbt-mcp/releases/tag/v1.17.1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6c5fd7320a36acf460872f90e27408ccfd18dcfbdf04271a20dc8c6c866a9332 · sha256:813fe3dbdd3816e1… · /containers/cna/references/3

{"name":"https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcf","tags":["x_refsource_CONFIRM"],"url":"https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcf"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6c5fd7320a36acf460872f90e27408ccfd18dcfbdf04271a20dc8c6c866a9332 · sha256:813fe3dbdd3816e1… · /containers/cna/references/0

{"tags":["exploit"],"url":"https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcf"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6c5fd7320a36acf460872f90e27408ccfd18dcfbdf04271a20dc8c6c866a9332 · sha256:813fe3dbdd3816e1… · /containers/adp/0/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer