PT-2026-141123

CVE-2026-123810

Published

2026-07-31

Updated

2026-11-09

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dynatrace MCP Server versions prior to 2.1.1

Description A DQL injection issue exists in several read capabilities where caller-controlled values are interpolated into Dynatrace Query Language (DQL) strings without sufficient validation or escaping. This allows a caller to break out of string literals, append arbitrary DQL pipeline stages, or use line comments to discard the remainder of the intended query. Consequently, callers can bypass field selection, time-window bounds, and result-display limits in tools marked with readOnlyHint. While this does not grant data access beyond the existing execute dql capability of the configured token, it violates the restricted tool contract that MCP clients may use for auto-approval.

The affected components and parameters are:

src/capabilities/find-monitored-entity-by-name.ts using the entityNames parameter.
src/capabilities/list-problems.ts, src/capabilities/list-vulnerabilities.ts, and src/capabilities/list-exceptions.ts using the timeframe parameter.
src/capabilities/get-events-for-cluster.ts using the timeframe, clusterId, and kubernetesEntityId parameters.