CVE-2026-123812

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the createdynatracenotebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the project's other write tools use that gate to obtain operator...

CVE-2026-123811

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests without authentication, session validation, or Host and Origin protections before dispatching them under the server's configured Dynatrac...

EUVD-2026-120447

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the createdynatracenotebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the project's other write tools use that gate to obtain operator...

CVE-2026-123812

The Dynatrace MCP Server (an MCP server for Dynatrace Observability) is vulnerable in versions prior to 1.8.7 . The root cause is that the create_dynatrace_notebook registration in src/index.ts performs a persistent document-write action without invoking the requestHumanApproval gate used by othe...

CVE-2026-123812 Dynatrace MCP Server: create_dynatrace_notebook missing the human-approval gate

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the createdynatracenotebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the project's other write tools use that gate to obtain operator...

CVE-2026-123811 Dynatrace MCP Server: Unauthenticated HTTP MCP Tool Invocation in `@dynatrace-oss/dynatrace-mcp-server`

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests without authentication, session validation, or Host and Origin protections before dispatching them under the server's configured Dynatrac...

CVE-2026-123811

The Dynatrace MCP Server (versions prior to 2.0.0 ) is vulnerable to unauthenticated HTTP MCP tool invocation when started with the --http flag. The server fails to implement authentication, session validation, or Host and Origin protections, allowing a network-reachable attacker to execute JSON-...

EUVD-2026-120446

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests without authentication, session validation, or Host and Origin protections before dispatching them under the server's configured Dynatrac...

CVE-2026-123811: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests without authentication, session validation, or Host and Origin protections before dispatching them under the server's configured Dynatrac...

CVE-2026-123812: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the createdynatracenotebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the project's other write tools use that gate to obtain operator...