CVE-2026-44970
Description
dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized every MCP tool call's complete arguments dictionary and sent it through dbtlabs_vortex.producer.log_proto without redaction, including sql_query from show, vars from run, build, and test, and node_selection from compile, while usage_tracking_enabled in settings.py enabled telemetry by default unless DBT_SEND_ANONYMOUS_USAGE_STATS=false or DO_NOT_TRACK=1 was set. This issue is fixed in version 1.17.1.
How to fix
- dbt-mcp1.17.1 or later
- getdbt dbt_mcp_server1.17.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dbt-mcpPyPI | v < 1.17.1 | 1.17.1 |
| getdbt dbt_mcp_server | v < 1.17.1 | 1.17.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.