Lucene search
+L

34 matches found

PyPA
PyPA
added 2026/07/13 3:19 p.m.27 views

dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled

Discovered through manual source code review. Verified by PoC execution against a local dbt-mcp v1.15.1 installation. SummaryDbtMCP.calltool in src/dbtmcp/mcp/server.py logs the complete raw arguments dictionary at INFO level on every tool invocation line 67 and again at ERROR level if the call...

2.5CVSS6.2AI score0.00165EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder