Launch Week Day 1: Announcing Security Design Review

pypi

dbt-mcp

View on pypi registry

3 Total advisories

3 Vulnerabilities

0 Malware

Vulnerabilities

CVE-2026-44970

dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction

CVE-2026-44968

dbt MCP Server has an Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

CVE-2026-44969

dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes