CVE-2026-44969 dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled

What is CVE-2026-44969?

CVE-2026-44969 is a low-severity vulnerability in dbt-labs dbt-mcp, published on 16 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/mcp/server.py logged the raw arguments dictionary at INFO level before each tool call and at ERROR level on exceptions, and configure_file_logging() wrote those records to dbt-mcp.log when DBT_MCP_SERVER_FILE_LOGGING=true, preserving sensitive sql_query, vars, and node_selection values in plaintext without automatic rotation or deletion. This issue is fixed in version 1.17.1.

Weakness: CWE-532

Which versions are affected by CVE-2026-44969?

3 open source packages ship an affected version, including dbt-mcp. It affects 1 product.

Products include Getdbt Dbt Mcp Server.

How do I fix CVE-2026-44969?

Upgrade dbt-mcp to 1.17.1 or later.

Is CVE-2026-44969 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-44969 exists.

Other vulnerabilities in dbt-labs dbt-mcp

• CVE-2026-44968 dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters Medium 6.3
• CVE-2026-44970 dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction Low 3.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7xgw-6qf3-7w59, PYSEC-2026-2441.