Model Context Protocol Server Vulnerability in dbt-mcp by dbt Labs
CVE-2026-44968

6.3MEDIUM

Key Information:

Vendor

Dbt-labs

Status
Dbt-mcp
Vendor
CVE Published:
16 July 2026

What is CVE-2026-44968?

The dbt-mcp Model Context Protocol server exhibited a vulnerability where the function _run_dbt_command() failed to sanitize inputs for node_selection and resource_type values. This allowed an attacker to inject global dbt flags—such as --profiles-dir, --project-dir, and --target—into the subprocess argument list, even with shell execution safeguards in place. This issue was resolved in version 1.17.1, emphasizing the importance of input validation in command execution contexts.

Affected Version(s)

dbt-mcp < 1.17.1

References

https://github.com/dbt-labs/dbt-mcp/security/advisories/G...
x_refsource_CONFIRM
https://github.com/dbt-labs/dbt-mcp/pull/752
x_refsource_MISC
https://github.com/dbt-labs/dbt-mcp/commit/6534507b5e7a72...
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.