CVE-2026-123811

Name of the Vulnerable Software and Affected Versions Dynatrace MCP Server versions prior to 2.0.0

Description When started with the --http option, the server fails to implement authentication, session validation, or Host and Origin protections. This allows a network-reachable attacker to send raw JSON-RPC tools/call requests that are executed using the server's configured Dynatrace credentials. An attacker can use the execute dql() function to read sensitive Grail data, including logs, security events, and user sessions, or use the create dynatrace notebook() function to create notebooks within the tenant. The send event path is not affected due to a human approval gate.

Recommendations Update to version 2.0.0. As a temporary mitigation, avoid starting the server with the --http flag or restrict network access to the server port to trusted sources only.