CVE-2026-44970— dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction
Possible ATT&CK Techniques 1AI
T1567 · Exfiltration Over Web ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-44970
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction
Source: CVE Program / CVE List V5
Vulnerability Description
dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized every MCP tool call's complete arguments dictionary and sent it through dbtlabs_vortex.producer.log_proto without redaction, including sql_query from show, vars from run, build, and test, and node_selection from compile, while usage_tracking_enabled in settings.py enabled telemetry by default unless DBT_SEND_ANONYMOUS_USAGE_STATS=false or DO_NOT_TRACK=1 was set. This issue is fixed in version 1.17.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过发送数据的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
dbt-labs dbt-mcp 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
dbt-labs dbt-mcp是dbt-labs公司的一款dbt模型上下文协议服务器软件。 dbt-labs dbt-mcp 1.17.1之前版本存在日志信息泄露漏洞，该漏洞源于DefaultUsageTracker.emit_tool_called_event()函数将MCP工具调用的完整参数字典序列化并通过日志协议发送，未进行编辑，包括sql_query、vars和node_selection等参数，同时默认启用了遥测，可能导致信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-44970
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44970
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-44970 (2)
Vendor Advisories for CVE-2026-44970 (1)
Vendor Pages for CVE-2026-44970 (1)
- 🔗 Release v1.17.1 · dbt-labs/dbt-mcp · GitHubx_refsource_MISC
Same Patch Batch · dbt-labs · 2026-07-16 · 3 CVEs total
| CVE-2026-44968 | 6.3 MEDIUM | dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type |
| CVE-2026-44969 | 2.5 LOW | dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without |
IV. Related Vulnerabilities
Same vendor: dbt-labs
- CVE-2026-44969
dbt-mcp: Tool Arguments Including SQL Queries and Credential - CVE-2026-44968
dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via nod - CVE-2026-39382
dbt has a Command Injection in Reusable Workflow via Unsanit - CVE-2026-29790
dbt-common: commonprefix() doesn't protect against path trav - CVE-2024-40637
Implicit override for built-in materializations from install
Same weakness: CWE-201
- CVE-2026-66339
Libsoup: libsoup: proxy credentials leak to destination serv - CVE-2026-16798
Devolutions PowerShell Universal 2026.2.2 信息泄露漏洞 - CVE-2026-27372
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensit - CVE-2026-12547
Libsoup: information disclosure in libsoup via soupauthmanag - CVE-2026-13380
VSee Clinic and API Exposes Cleartext SFTP Credentials in Un
V. Comments for CVE-2026-44970
No comments yet