CVE-2026-44969 | dbt-labs dbt-mcp up to 1.17.0 Model Context Protocol Server server.py call_tool node_selection information disclosure

July 16, 2026 Yanac

A vulnerability was found in dbt-labs dbt-mcp up to 1.17.0. It has been rated as problematic. This issue affects the function call_tool of the file src/dbt_mcp/mcp/server.py of the component Model Context Protocol Server. This manipulation of the argument node_selection causes information disclosure.

This vulnerability appears as CVE-2026-44969. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More