CVE-2026-55837

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.20.0, the local OAuth helper in src/dbt_mcp/oauth/fastapi_app.py exposes GET /dbt_platform_context without authentication or Host validation after a user completes the dbt Platform OAuth flow. The endpoint returns the full DbtPlatformContext, including access_token and refresh_token values persisted by the context manager, to any process that can reach 127.0.0.1:6785. The absence of TrustedHostMiddleware allows a remote attacker to use DNS rebinding against a victim's browser because the helper accepts arbitrary Host headers, while a co-located process can request the endpoint directly. The stolen tokens provide immediate dbt Platform API access as the victim and persistent access through the refresh token, allowing access to or modification of projects, jobs, environment secrets, and related account data. This issue is fixed in version 1.20.0.

• CWE-200
• CWE-306
• CWE-346

• https://github.com/dbt-labs/dbt-mcp/commit/b8bdb40f90ed29f6b36176c5f6c697aa27a035a9
• https://github.com/dbt-labs/dbt-mcp/pull/789
• https://github.com/dbt-labs/dbt-mcp/releases/tag/v1.20.0
• https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jr33-mw75-7j8f
• https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jr33-mw75-7j8f

Published

Sep 14, 2026

Last Modified

Sep 16, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5583A security vulnerability has been detected in PHPGurukul Onl…6.3
• CVE-2026-55830RestrictedPython is a tool that helps to define a subset of …8.3
• CVE-2026-55831Netty is a network application framework for development of …7.5
• CVE-2026-55832Tract is a tiny, no-nonsense, self-contained TensorFlow and …6.1
• CVE-2026-55833Netty is a network application framework for development of …7.5
• CVE-2026-55834Pocket ID is an OIDC provider that allows users to authentic…4.3
• CVE-2026-55838RustFS is a distributed object storage system built in Rust.…4.3
• CVE-2026-55839Kestra is an open-source, event-driven orchestration platfor…8.7
• CVE-2026-5584A vulnerability has been found in Fosowl agenticSeek 0.1.0. …9.8
• CVE-2026-55841Graylog is a free and open log management platform. Prior to…7.5
• CVE-2026-55843Snipe-IT is an IT asset/license management system. Prior to …6.5
• CVE-2026-55844Home Assistant is open source home automation software that …7.5