All 4 CVE vulnerabilities found in dynatrace-mcp, with AI-generated Chinese analysis, references, and POCs.
Vendor: dynatrace-oss
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-123812 | Dynatrace MCP Server: create_dynatrace_notebook missing the human-approval gate CWE-862 | 3.7 | Low | 2026-11-09 |
| CVE-2026-123811 | Dynatrace MCP Server: Unauthenticated HTTP MCP Tool Invocation in `@dynatrace-oss/dynatrace-mcp-server` CWE-306 | 7.5 | High | 2026-11-09 |
| CVE-2026-123810 | Dynatrace MCP Server: DQL injection via parameters not documented as DQL CWE-89 | 4.3 | Medium | 2026-11-09 |
| CVE-2026-123809 | Dynatrace MCP Server: Workflow template injection via create_workflow_for_notification CWE-1336 | 4.2 | Medium | 2026-11-09 |
All 4 known CVE vulnerabilities affecting dynatrace-mcp with full Chinese analysis, references, and POCs where available.