CVE-2026-123809

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the createworkflowfornotification tool inserts the caller-controlled teamName, problemType, and channel values into a Dynatrace workflow without neutralizing Jinja2 expressions. A caller can place template...

EUVD-2026-120442

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the createworkflowfornotification tool inserts the caller-controlled teamName, problemType, and channel values into a Dynatrace workflow without neutralizing Jinja2 expressions. A caller can place template...

CVE-2026-123809

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the createworkflowfornotification tool inserts the caller-controlled teamName, problemType, and channel values into a Dynatrace workflow without neutralizing Jinja2 expressions. A caller can place template...

CVE-2026-123809

The Dynatrace MCP Server (prior to version 2.0.0 ) is vulnerable to a Jinja2 template injection within the create_workflow_for_notification tool. The tool fails to neutralize special elements in caller-controlled teamName, problemType, and channel values when creating a Dynatrace workflow. An att...

CVE-2026-123809: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the createworkflowfornotification tool inserts the caller-controlled teamName, problemType, and channel values into a Dynatrace workflow without neutralizing Jinja2 expressions. A caller can place template...