CVE-2026-123811 Dynatrace MCP Server: Unauthenticated HTTP MCP Tool Invocation in `@dynatrace-oss/dynatrace-mcp-server`
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-123811?
CVE-2026-123811 is a high-severity vulnerability in dynatrace-oss dynatrace-mcp, published on 9 Nov 2026.
Official description
Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests without authentication, session validation, or Host and Origin protections before dispatching them under the server's configured Dynatrace credentials. A network-reachable caller can invoke execute_dql to read logs, security events, user sessions, and other Grail data, or invoke create_dynatrace_notebook to create tenant-visible notebooks. The send_event path is not affected because its requestHumanApproval gate blocks this attack path, and reset_grail_budget only demonstrates dispatch without accessing Dynatrace data. This issue is fixed in version 2.0.0.
Weakness: CWE-306
Which versions are affected by CVE-2026-123811?
1 open source package ship an affected version, including @dynatrace-oss/dynatrace-mcp-server.
| Package | Affected | Fixed in |
|---|---|---|
@dynatrace-oss/dynatrace-mcp-server npm | All versions | 2.0.0 |
How do I fix CVE-2026-123811?
Upgrade @dynatrace-oss/dynatrace-mcp-server to 2.0.0 or later.
Is CVE-2026-123811 being exploited?
There is no known exploitation of CVE-2026-123811 in the wild and no public exploit code.
Sources
Also known as GHSA-p7w7-4929-vpj5.