dbt-mcp vulnerabilities (PyPI)
4 vulnerabilities.
-
dbt-mcpPyPI dbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens 6.8 Medium -
dbt-mcpPyPI dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction 3.1 Low -
dbt-mcpPyPI dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled 2.5 Low -
dbt-mcpPyPI dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters 6.3 Medium