Dbt-labs Dbt-mcp vulnerabilities
- dbt-labs dbt-mcpdbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens6.8 Medium
- dbt-labs dbt-mcp, getdbt dbt mcp server +1 moredbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction3.1 Low
- dbt-labs dbt-mcp, getdbt dbt mcp server +1 moredbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled2.5 Low
- dbt-labs dbt-mcp, getdbt dbt mcp server +1 moredbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters6.3 Medium