CVE-2026-44970

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized every MCP tool call's complete arguments dictionary and sent it through dbtlabs_vortex.producer.log_proto without redaction, including sql_query from show, vars from run, build, and test, and node_selection from compile, while usage_tracking_enabled in settings.py enabled telemetry by default unless DBT_SEND_ANONYMOUS_USAGE_STATS=false or DO_NOT_TRACK=1 was set. This issue is fixed in version 1.17.1.

• CWE-201

• https://github.com/dbt-labs/dbt-mcp/commit/6534507b5e7a729758d5baece155602cad0bb22fPatch
• https://github.com/dbt-labs/dbt-mcp/pull/752Issue Tracking, Patch
• https://github.com/dbt-labs/dbt-mcp/releases/tag/v1.17.1Release Notes
• https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcfExploit, Mitigation, Vendor Advisory
• https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcfExploit, Mitigation, Vendor Advisory

Published

Jul 16, 2026

Last Modified

Jul 21, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44965In versions of the Datadog Android application prior to v545…5.5
• CVE-2026-44966Velocity.js is a JavaScript implementation of the Apache Vel…9.8
• CVE-2026-44967OpenTelemetry-cpp is the C++ implementation of OpenTelemetry…5.3
• CVE-2026-44968dbt-mcp is a Model Context Protocol server for interacting w…6.3
• CVE-2026-44969dbt-mcp is a Model Context Protocol server for interacting w…3.3
• CVE-2026-4497A vulnerability was determined in Totolink WA300 5.2cu.7112_…9.8
• CVE-2026-44971GuardDog is a CLI tool to identify malicious PyPI packages. …8.2
• CVE-2026-44972GuardDog is a CLI tool to identify malicious PyPI packages. …5
• CVE-2026-44973Billy is an interface filesystem abstraction for Go. Prior t…8.1
• CVE-2026-44974@hapi/content provided HTTP Content-* headers parsing. Prior…7.7
• CVE-2026-44975Frappe is a full-stack web application framework. Prior to v…5.3
• CVE-2026-44976Frappe is a full-stack web application framework. Prior to v…5.3