CVE-2026-123812
LOW
INFO
Priority: 0.01
BB Relevance:
57/100
Published: 2026-11-09
Modified: 2026-11-12
First seen: 2026-11-09
Status: active
Attack Surface
Network
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
Low
A:
None
Description
Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the create_dynatrace_notebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the project's other write tools use that gate to obtain operator consent. A caller can create tenant-visible notebooks containing attacker-controlled Markdown or DQL content, and tenant users may later execute embedded DQL when opening the notebook. The tool also lacks a destructiveHint annotation that would signal its side effects to MCP clients. This issue is fixed in version 1.8.7.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| dynatrace-oss | dynatrace-mcp | < 1.8.7 |
| dynatrace-oss | dynatrace-mcp | < 1.8.7 |
References & Advisories (3)
x_refsource_MISC
x_refsource_MISC
x_refsource_CONFIRM