CVE-2026-123812 Dynatrace MCP Server: create_dynatrace_notebook missing the human-approval gate
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-123812?
CVE-2026-123812 is a low-severity vulnerability in dynatrace-oss dynatrace-mcp, published on 9 Nov 2026.
Official description
Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the create_dynatrace_notebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the project's other write tools use that gate to obtain operator consent. A caller can create tenant-visible notebooks containing attacker-controlled Markdown or DQL content, and tenant users may later execute embedded DQL when opening the notebook. The tool also lacks a destructiveHint annotation that would signal its side effects to MCP clients. This issue is fixed in version 1.8.7.
Weakness: CWE-862
Which versions are affected by CVE-2026-123812?
1 open source package ship an affected version, including @dynatrace-oss/dynatrace-mcp-server.
| Package | Affected | Fixed in |
|---|---|---|
@dynatrace-oss/dynatrace-mcp-server npm | All versions | 1.8.7 |
How do I fix CVE-2026-123812?
Upgrade @dynatrace-oss/dynatrace-mcp-server to 1.8.7 or later.
Is CVE-2026-123812 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-123812 exists.
Sources
Also known as GHSA-pc2w-4mq8-32qw.