dbt-labs dbt-mcp up to 1.17.0 Model Context Protocol Server server.py call_tool node_selection information disclosure

Summaryinfo

A vulnerability categorized as problematic has been discovered in dbt-labs dbt-mcp up to 1.17.0. Impacted is the function call_tool of the file src/dbt_mcp/mcp/server.py of the component Model Context Protocol Server. Such manipulation of the argument node_selection leads to information disclosure. This vulnerability is traded as CVE-2026-44969. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in dbt-labs dbt-mcp up to 1.17.0. Affected by this issue is the function call_tool of the file src/dbt_mcp/mcp/server.py of the component Model Context Protocol Server. The manipulation of the argument node_selection with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. CVE summarizes:

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/mcp/server.py logged the raw arguments dictionary at INFO level before each tool call and at ERROR level on exceptions, and configure_file_logging() wrote those records to dbt-mcp.log when DBT_MCP_SERVER_FILE_LOGGING=true, preserving sensitive sql_query, vars, and node_selection values in plaintext without automatic rotation or deletion. This issue is fixed in version 1.17.1.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-44969 since 05/08/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1592.

Upgrading to version 1.17.1 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• dbt-labs

Name

• dbt-mcp

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17.0

Website

• Product: https://github.com/dbt-labs/dbt-mcp/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion