Auth bypass in Dynatrace-Oss Dynatrace-Mcp

CVE-2026-123812

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the create_dynatrace_notebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the project's other write tools use that gate to obtain operator consent. A caller can create tenant-visible notebooks containing attacker-controlled Markdown or DQL content, and tenant users may later execute embedded DQL when opening the notebook. The tool also lacks a destructiveHint annotation that would signal its side effects to MCP clients. This issue is fixed in version 1.8.7.

Vulnerability class: Broken Access Control

Published .

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-123812?
CVE-2026-123812 is a low-severity vulnerability in Dynatrace-Oss Dynatrace-Mcp, classified under Missing Authorization. CVSS score: 3.7/10. Published 2026-11-09.
How severe is CVE-2026-123812?
Low severity. CVSS v3 base score is 3.7 out of 10.