{"cve":"CVE-2026-41490","nvd":{"published":"2026-05-07T14:16:02.527","modified":"2026-10-26T00:10:00.150","status":"Awaiting Analysis","description":"Dagster is an orchestration platform for the development, production, and observation of data assets. Prior to Dagster Core version 1.13.1 and prior to Dagster libraries version 0.29.1, the DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would execute against the target database backend under the I/O manager's credentials. Only deployments that use dynamic partitions are affected. Pipelines using static or time-window partitions are not impacted. This issue has been patched in Dagster Core version 1.13.1 and Dagster libraries version 0.29.1.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","score":8.3},"cwes":["CWE-89"],"references":["https://github.com/dagster-io/dagster/releases/tag/1.13.1","https://github.com/dagster-io/dagster/security/advisories/GHSA-mjw2-v2hm-wj34"],"products":[],"source":"nvd","synced_at":"2026-10-26T00:31:35.753532240+00:00"},"epss":{"cve":"CVE-2026-41490","score":0.00265,"percentile":0.18244,"date":"2026-10-26"},"kev":null,"osv":[{"id":"GHSA-mjw2-v2hm-wj34","url":"https://osv.dev/vulnerability/GHSA-mjw2-v2hm-wj34","summary":"Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations","modified":"2026-09-10T03:51:02.686198785Z","packages":[{"ecosystem":"PyPI","name":"dagster-duckdb","purl":"pkg:pypi/dagster-duckdb","ranges":["<0.29.1"],"fixed":["0.29.1"]},{"ecosystem":"PyPI","name":"dagster-snowflake","purl":"pkg:pypi/dagster-snowflake","ranges":["<0.29.1"],"fixed":["0.29.1"]},{"ecosystem":"PyPI","name":"dagster-gcp","purl":"pkg:pypi/dagster-gcp","ranges":["<0.29.1"],"fixed":["0.29.1"]},{"ecosystem":"PyPI","name":"dagster","purl":"pkg:pypi/dagster","ranges":["<1.13.1"],"fixed":["1.13.1"]},{"ecosystem":"PyPI","name":"dagster-deltalake","purl":"pkg:pypi/dagster-deltalake","ranges":["<0.29.1"],"fixed":["0.29.1"]},{"ecosystem":"PyPI","name":"dagster-snowflake-polars","purl":"pkg:pypi/dagster-snowflake-polars","ranges":["<0.29.1"],"fixed":["0.29.1"]}]},{"id":"PYSEC-2026-2432","url":"https://osv.dev/vulnerability/PYSEC-2026-2432","summary":"Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations","modified":"2026-07-13T16:42:32.922175068Z","packages":[{"ecosystem":"PyPI","name":"dagster","purl":"pkg:pypi/dagster","ranges":["<1.13.1"],"fixed":["1.13.1"]}]},{"id":"PYSEC-2026-2433","url":"https://osv.dev/vulnerability/PYSEC-2026-2433","summary":"Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations","modified":"2026-07-13T16:42:32.922175068Z","packages":[{"ecosystem":"PyPI","name":"dagster-deltalake","purl":"pkg:pypi/dagster-deltalake","ranges":["<0.29.1"],"fixed":["0.29.1"]}]},{"id":"PYSEC-2026-2434","url":"https://osv.dev/vulnerability/PYSEC-2026-2434","summary":"Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations","modified":"2026-07-13T16:42:32.922175068Z","packages":[{"ecosystem":"PyPI","name":"dagster-duckdb","purl":"pkg:pypi/dagster-duckdb","ranges":["<0.29.1"],"fixed":["0.29.1"]}]},{"id":"PYSEC-2026-2435","url":"https://osv.dev/vulnerability/PYSEC-2026-2435","summary":"Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations","modified":"2026-07-13T16:42:32.922175068Z","packages":[{"ecosystem":"PyPI","name":"dagster-gcp","purl":"pkg:pypi/dagster-gcp","ranges":["<0.29.1"],"fixed":["0.29.1"]}]},{"id":"PYSEC-2026-2436","url":"https://osv.dev/vulnerability/PYSEC-2026-2436","summary":"Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations","modified":"2026-07-13T16:42:32.922175068Z","packages":[{"ecosystem":"PyPI","name":"dagster-snowflake","purl":"pkg:pypi/dagster-snowflake","ranges":["<0.29.1"],"fixed":["0.29.1"]}]},{"id":"PYSEC-2026-2437","url":"https://osv.dev/vulnerability/PYSEC-2026-2437","summary":"Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations","modified":"2026-07-13T16:42:32.922175068Z","packages":[{"ecosystem":"PyPI","name":"dagster-snowflake-polars","purl":"pkg:pypi/dagster-snowflake-polars","ranges":["<0.29.1"],"fixed":["0.29.1"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}