Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-123812 EUVD-2026-120447GHSA-pc2w-4mq8-32qw

Dynatrace MCP Server: create_dynatrace_notebook missing the human-approval gate

Published Nov 9, 2026 · Updated Nov 10, 2026 · Assigned by GitHub_M

Description

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the create_dynatrace_notebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval, although the project's other write tools use that gate to obtain operator consent. A caller can create tenant-visible notebooks containing attacker-controlled Markdown or DQL content, and tenant users may later execute embedded DQL when opening the notebook. The tool also lacks a destructiveHint annotation that would signal its side effects to MCP clients. This issue is fixed in version 1.8.7.

Affected products

VendorProductAffectedFixed
dynatrace-oss dynatrace-mcp < 1.8.7 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm @dynatrace-oss/dynatrace-mcp-server < 1.8.7 1.8.7 GHSA-pc2w-4mq8-32qw

References