dbt-labs vulnerabilities

dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`

dbt-labs · dbt-core

dbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens

dbt-labs · dbt-mcp

dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled

dbt-labs · dbt-mcp

dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction

dbt-labs · dbt-mcp

dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

dbt-labs · dbt-mcp

dbt has a Command Injection in Reusable Workflow via Unsanitized comment-body Output

dbt-labs · dbt-core

dbt-common: commonprefix() doesn't protect against path traversal

dbt-labs · dbt-common

Implicit override for built-in materializations from installed packages in dbt-core

dbt-labs · dbt-core

dbt allows Binding to an Unrestricted IP Address via socketsocket

dbt-labs · dbt-core