PT-2026-41150 · Dbt · Dbt-Mcp

CVE-2026-44970 · Published 2026-05-14 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions dbt-mcp versions prior to 1.17.1

Description The DefaultUsageTracker.emit tool called event() function in src/dbt mcp/tracking/tracking.py serializes the complete arguments dictionary of every Model Context Protocol (MCP) tool call and transmits it without redaction to the dbt Labs telemetry service via dbtlabs vortex.producer.log proto. This includes sensitive data such as the sql query parameter from the show tool, the vars parameter (which may contain credentials) from the run, build, and test tools, and the node selection parameter from the compile tool. Telemetry is enabled by default through usage tracking enabled in settings.py unless the environment variables DBT SEND ANONYMOUS USAGE STATS=false or DO NOT TRACK=1 are explicitly set.

Recommendations Update dbt-mcp to version 1.17.1. As a temporary mitigation, set the environment variable DBT SEND ANONYMOUS USAGE STATS=false or DO NOT TRACK=1 to disable telemetry.

Exploit

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2026-44970

GHSA-JJ54-R8GM-2FCF

PYSEC-2026-2442

Affected Products

Dbt-Mcp

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44970.json · Exploit
• 🔥 https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcf · Exploit
• https://github.com/dbt-labs/dbt-mcp/pull/752 · Patch
• https://github.com/dbt-labs/dbt-mcp/commit/6534507b5e7a729758d5baece155602cad0bb22f · Patch
• https://osv.dev/vulnerability/CVE-2026-44970 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44970 · Security Note
• https://osv.dev/vulnerability/GHSA-jj54-r8gm-2fcf · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2442 · Vendor Advisory
• https://github.com/dbt-labs/dbt-mcp/releases/tag/v1.17.1 · Note
• https://github.com/dbt-labs/dbt-mcp · Note
• https://pypi.org/project/dbt-mcp · Note
• https://twitter.com/CVEnew/status/2077841142121709934 · Twitter Post
• https://twitter.com/infoflowcloud/status/2077842357127446836 · Twitter Post
• https://github.com/advisories/GHSA-jj54-r8gm-2fcf · Note
• https://t.me/cveNotify/209217 · Telegram Post