Dbt-labs

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 7
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    3
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-100406

    dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`

    Last Modified: Oct 22, 2026
    Published: Oct 14, 2026

    CVE-2026-55837

    dbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens

    Last Modified: Sep 16, 2026
    Published: Sep 14, 2026

    CVE-2026-44969

    dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled

    Last Modified: Jul 28, 2026
    Published: Jul 16, 2026

    CVE-2026-44970

    dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction

    Last Modified: Jul 28, 2026
    Published: Jul 16, 2026

    CVE-2026-44968

    dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

    Last Modified: Jul 28, 2026
    Published: Jul 16, 2026
    Items Per Page
    Dbt-Labs Vulnerabilities & Security CVEs | CVE-DB