Dbt-Labs

7 CVEs across 3 Dbt-Labs products. Browse Dbt-Labs vulnerabilities, severities, and proof-of-concept exploits.

Dbt-Labs products with known CVEs

ProductCVEs
Dbt-Core3
Dbt-Mcp3
Dbt-Common1
Dbt-Labs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-44970Low3.12026-07-16dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/trac…
CVE-2026-44969Low2.52026-07-16dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/mcp/server.py logged the raw arguments…
CVE-2026-44968Medium6.32026-07-16dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, _run_dbt_command() in src/dbt_mcp/dbt_cli/tools.py appended unsanitized n…
CVE-2026-393822026-04-07dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Inside the reusable…
CVE-2026-29790Medium5.32026-03-06dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exi…
CVE-2024-40637Medium4.22024-07-16dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user install…
CVE-2024-36105Medium5.32024-05-27dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Prior to versions 1…