CVE-2026-44970 Details
Description
dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized every MCP tool call's complete arguments dictionary and sent it through dbtlabs_vortex.producer.log_proto without redaction, including sql_query from show, vars from run, build, and test, and node_selection from compile, while usage_tracking_enabled in settings.py enabled telemetry by default unless DBT_SEND_ANONYMOUS_USAGE_STATS=false or DO_NOT_TRACK=1 was set. This issue is fixed in version 1.17.1.
A vulnerability in dbt-mcp, a Model Context Protocol server for dbt interaction, allows for the unredacted transmission of sensitive data to dbt Labs telemetry. This issue affects all versions through 1.17.0. The DefaultUsageTracker's emit_tool_called_event method serializes the complete arguments dictionary of every MCP tool call, including raw SQL queries and vars data, and sends it to the dbt Labs telemetry service via dbtlabs_vortex.producer.log_proto. Telemetry is enabled by default, with no user consent required, unless specific environment variables are set to opt-out.
Users can update to dbt-mcp version 1.17.1, which improves input validation, reduces the verbosity of argument logging, and redacts sensitive information such as SQL queries and vars values before transmission to the dbt Labs telemetry service.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 18, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcf | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/dbt-labs/dbt-mcp/commit/6534507b5e7a729758d5baece155602cad0bb22f | [email protected] | Patch |
| https://github.com/dbt-labs/dbt-mcp/pull/752 | [email protected] | Issue TrackingPatch |
| https://github.com/dbt-labs/dbt-mcp/releases/tag/v1.17.1 | [email protected] | Release Notes |
| https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcf | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-201 | Insertion of Sensitive Information Into Sent Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| getdbt dbt mcp server | < 1.17.1 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 21, 2026 | Initial Analysis | [email protected] |
| Jul 18, 2026 | CVE Modified | CISA-ADP |
| Jul 16, 2026 | New CVE Received | [email protected] |