CVE-2026-123809

Name of the Vulnerable Software and Affected Versions Dynatrace MCP Server versions prior to 2.0.0

Description A template injection issue exists in the create workflow for notification tool. The tool fails to neutralize Jinja2 expressions when inserting caller-controlled values into a Dynatrace workflow. An attacker can provide template expressions, such as event(), through the teamName, problemType, and channel variables. These expressions are evaluated by the workflow engine at runtime, which can lead to the disclosure of event or tenant metadata to an attacker-selected channel if a valid Slack connector is configured. The created workflow persists in the tenant after the session ends and is visible to other users by default as the isPrivate option defaults to false. Exploitation may occur via MCP prompt-injection or if an operator approves a prompt containing the template fragment.

Recommendations Update Dynatrace MCP Server to version 2.0.0. As a temporary mitigation, avoid using the create workflow for notification tool or restrict the input values for teamName, problemType, and channel to prevent the use of Jinja2 template expressions.