CVE-2026-123812

The Dynatrace MCP Server (an MCP server for Dynatrace Observability) is vulnerable in versions prior to 1.8.7 . The root cause is that the create_dynatrace_notebook registration in src/index.ts performs a persistent document-write action without invoking the requestHumanApproval gate used by othe...