CVE-2026-123812

Name of the Vulnerable Software and Affected Versions Dynatrace MCP Server versions prior to 1.8.7

Description The create dynatrace notebook registration in src/index.ts performs a persistent document-write action without calling requestHumanApproval(), failing to obtain operator consent. This allows a caller to create tenant-visible notebooks containing attacker-controlled Markdown or DQL (Dynatrace Query Language) content. Consequently, tenant users may execute embedded DQL when opening the notebook. Additionally, the tool lacks a destructiveHint annotation, which is used to signal side effects to MCP clients.

Recommendations Update to version 1.8.7.