Skip to content
OpenAdvisories

Vendor

dynatrace-oss

4 known vulnerabilities.

Products

dynatrace-mcp 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-123810

    Dynatrace MCP Server: DQL injection via parameters not documented as DQL

    Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.1.1, several read capabilities interpolate caller-controlled values into DQL without sufficient validation or escaping. The src/capabilities/find-monitored-entity-by-name.ts capabil…

    dynatrace-oss dynatrace-mcp
  • Medium 4.2
    CVE-2026-123809

    Dynatrace MCP Server: Workflow template injection via create_workflow_for_notification

    Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the create_workflow_for_notification tool inserts the caller-controlled teamName, problemType, and channel values into a Dynatrace workflow without neutralizing Jinja2 expressi…

    dynatrace-oss dynatrace-mcp