cve.bz

dynatrace-oss dynatrace-mcp vulnerabilities, newest first

Filter
  1. 3.7CVE-2026-123812EPSS 0.2%

    Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the create_dynatrace_notebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the pr…

  2. 7.5CVE-2026-123811EPSS 0.2%

    Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests without authentication, session validation, or Host and Origin protections befo…

  3. 4.3CVE-2026-123810EPSS 0.2%

    Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.1.1, several read capabilities interpolate caller-controlled values into DQL without sufficient validation or escaping. The src/capabilities/find-monitored-entit…

  4. 4.2CVE-2026-123809EPSS 0.2%

    Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the create_workflow_for_notification tool inserts the caller-controlled teamName, problemType, and channel values into a Dynatrace workflow without neutrali…