CVE-2026-44968
Medium
Description
dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, _run_dbt_command() in src/dbt_mcp/dbt_cli/tools.py appended unsanitized node_selection and resource_type values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-dir, --project-dir, and --target into subprocess.Popen even though shell=False prevents shell metacharacter injection. This issue is fixed in version 1.17.1.
SeverityMedium
CVSS6.3
Exploit probability—
ProductDbt-mcp
PublishedJul 16, 2026
First seenJul 16, 2026
Weakness typeCWE-88CWE-88
How to fix
Update
- dbt-mcp1.17.1 or later
- getdbt dbt_mcp_server1.17.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dbt-mcpPyPI | v < 1.17.1 | 1.17.1 |
| getdbt dbt_mcp_server | v < 1.17.1 | 1.17.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.