dbt-labs Summary

Latest vulnerabilities published by dbt-labs

JSON RSS CSV 🔔 Create Alert Trigger

14 September 2026

Local OAuth Vulnerability in dbt-mcp Server by dbt Labs
CVE-2026-55837
Dbt-labsDbt-mcp6.8MEDIUM

16 July 2026

Model Context Protocol Server Log Exposure in dbt-mcp
CVE-2026-44969
Dbt-labsDbt-mcp2.5LOW
Model Context Protocol Server Vulnerability in dbt-MCP by dbt Labs
CVE-2026-44970
Dbt-labsDbt-mcp3.1LOW
Model Context Protocol Server Vulnerability in dbt-mcp by dbt Labs
CVE-2026-44968
Dbt-labsDbt-mcp6.3MEDIUM

7 April 2026

Shell Injection Vulnerability in dbt-Labs Product
CVE-2026-39382
Dbt-labsDbt-core9.3CRITICAL

6 March 2026

Path Traversal Vulnerability in dbt-common Utilities from dbt-labs
CVE-2026-29790
Dbt-labsDbt-common2LOW

16 July 2024

Malicious Package Could Potentially Override Core Components of dbt
CVE-2024-40637
Dbt-labsDbt-core7.8HIGH

27 May 2024

Unauthorized Access Risk in dbt-core Prior to Versions 1.6.15, 1.7.15, and 1.8.1
CVE-2024-36105
Dbt-labsDbt-core5.3MEDIUM