# CVE-2026-123810: Dynatrace MCP Server DQL injection in read capabilities

Source: https://junglewise.ai/threats/cve-2026-123810-dynatrace-mcp-server-is-an-mcp-server-for-dynatrace  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-09. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-123810 · Severity: medium · CVSS 4.3 · Published 2026-11-09

Dynatrace MCP Server is an integration tool for Dynatrace Observability that allows querying monitoring data. Prior to version 2.1.1, the server fails to properly validate user input when constructing DQL (Dynatrace Query Language) queries, allowing attackers to manipulate queries to bypass field selection and result-display limits. While the vulnerability does not grant access beyond what the configured API token already permits, it breaks security controls intended to restrict what data tools can retrieve.

Technologies: [Dynatrace-Mcp-Server](https://junglewise.ai/threats/technologies/dynatrace-mcp-server). Vendors: [Dynatrace](https://junglewise.ai/threats/vendors/dynatrace).

## Quick answers

**Is CVE-2026-123810 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-123810 being exploited in the wild.

**How severe is CVE-2026-123810?** Medium severity, with a CVSS score of 4.3, published 9 November 2026.

**Which products and versions are affected?** Dynatrace-Mcp-Server before 2.1.1.

**Is there a fix for CVE-2026-123810?** Yes: fixed in 2.1.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-123810 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-123810?** Check whether you run Dynatrace-Mcp-Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 2.1.1

## Technical details

The vulnerability is a DQL injection flaw in multiple read capabilities that interpolate unsanitized caller-controlled values directly into query strings. Affected components include find-monitored-entity-by-name.ts (entity names), list-problems.ts, list-vulnerabilities.ts, list-exceptions.ts (timeframe values), and get-events-for-cluster.ts (timeframe, clusterId, kubernetesEntityId). An authenticated attacker with access to these tools can craft input values to close string literals, append pipeline stages, or comment out query portions, effectively bypassing intended query restrictions marked as readOnlyHint.

## Affected products

- Dynatrace MCP Server before 2.1.1

## Timeline

- 2026-11-09: disclosed
- 2026-07-14: patched

## References

- [https://github.com/dynatrace-oss/dynatrace-mcp/commit/15d3546c0618ffbaeaeca477337e08e92f2151bc](https://github.com/dynatrace-oss/dynatrace-mcp/commit/15d3546c0618ffbaeaeca477337e08e92f2151bc)
- [https://github.com/dynatrace-oss/dynatrace-mcp/releases/tag/v2.1.1](https://github.com/dynatrace-oss/dynatrace-mcp/releases/tag/v2.1.1)

## Related threats

- [Dynatrace MCP Server authentication bypass in HTTP mode](https://junglewise.ai/threats/cve-2026-123811-dynatrace-mcp-server-is-an-mcp-server-for-dynatrace)
- [Dynatrace MCP Server template injection in workflow creation](https://junglewise.ai/threats/cve-2026-123809-dynatrace-mcp-server-is-an-mcp-server-for-dynatrace)
- [Dynatrace MCP Server DQL injection via unquoted parameters](https://junglewise.ai/threats/dynatrace-mcp-server-dql-injection-via-unquoted-parameters-7a308c6e)