Skip to content
OpenAdvisories

Vendor

dbt-labs

9 known vulnerabilities.

Products

dbt-mcp 4 dbt-core 4 dbt-common 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-100406

    dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`

    dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. From 2.0.0-alpha.0 until 2.0.0-alpha.5, dbt docs serve exposes the unauthenticated POST /api/v1/query endpoint in crate…

    dbt-labs dbt-core