CVE-2026-123809

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the create_workflow_for_notification tool inserts the caller-controlled teamName, problemType, and channel values into a Dynatrace workflow without neutralizing Jinja2 expressions. A caller can place template expressions such as event() in those values, and the workflow engine evaluates them when the persistent workflow runs. When the workflow has a valid Slack connector, the resulting Slack action can disclose event or tenant metadata to an attacker-selected channel; the shipped placeholder connection does not deliver messages by itself. The workflow remains in the tenant after the MCP session and credentials are gone. The isPrivate option defaults to false, making the created workflow tenant-visible unless the caller changes it. Exploitation requires either an MCP prompt-injection path or an operator approving a prompt that displays the template fragment literally. This issue is fixed in version 2.0.0.

• CWE-1336

• https://github.com/dynatrace-oss/dynatrace-mcp/commit/8f975d6f6713b6da803aa1b602c9f68c8a6ec02a
• https://github.com/dynatrace-oss/dynatrace-mcp/releases/tag/v2.0.0
• https://github.com/dynatrace-oss/dynatrace-mcp/security/advisories/GHSA-xrmj-5g4g-8987

Published

Nov 9, 2026

Last Modified

Nov 12, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-123803SuperTokens Core is an open source authentication server. Fr…8.1
• CVE-2026-123804SuperTokens Core is an open source authentication server. Fr…6.8
• CVE-2026-123805SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NE…7.5
• CVE-2026-123806python-tuf is a Python reference implementation of The Updat…4
• CVE-2026-123807Signal K Server is a server application that runs on a centr…9.8
• CVE-2026-123808Nuxt UI is an intuitive Vue UI library powered by Reka UI an…5.3
• CVE-2026-123810Dynatrace MCP Server is an MCP server for Dynatrace Observab…4.3
• CVE-2026-123811Dynatrace MCP Server is an MCP server for Dynatrace Observab…7.5
• CVE-2026-123812Dynatrace MCP Server is an MCP server for Dynatrace Observab…3.7
• CVE-2026-123813pyLoad is a free and open-source download manager written in…7.5
• CVE-2026-123814pyLoad is a free and open-source download manager written in…6.4
• CVE-2026-123815pyLoad is a free and open-source download manager written in…9.4