Vendorsgetdbtdbt_mcp_serverany version
Vulnerabilities

getdbt (dbt Labs) MCP Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-44968
dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters
Published 2026-07-16 · Analyzed
6.3EPSS 0.002
CVE-2026-44970
dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction
Published 2026-07-16 · Analyzed
4.3EPSS 0.004
CVE-2026-44969
dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled
Published 2026-07-16 · Analyzed
3.3EPSS 0.002