Executive brief
A vulnerability in the Dynatrace MCP Server allows unauthorized individuals to access sensitive monitoring data. When the server is run in HTTP mode, it fails to verify the identity of incoming requests, allowing anyone with network access to the server to read logs, security events, and user session data. This could lead to the exposure of confidential business information and unauthorized creation of documents within the Dynatrace environment.
Technical details
The @dynatrace-oss/dynatrace-mcp-server package contains a missing authentication vulnerability when the --http transport flag is enabled. The StreamableHTTPServerTransport implementation fails to enforce bearer token checks, session validation, or Host/Origin allowlists. An unauthenticated attacker can send JSON-RPC 'tools/call' requests to execute high-impact tools such as 'execute_dql' and 'create_dynatrace_notebook' using the server's pre-configured Dynatrace credentials. This allows for arbitrary DQL query execution (reading logs and security events) and unauthorized document creation. The vulnerability is addressed in version 2.0.0 by requiring an authentication token for HTTP mode.
Affected products
- Dynatrace @dynatrace-oss/dynatrace-mcp-server <= 1.8.7
Timeline
- advisory: GHSA-p7w7-4929-vpj5 published
- 2026-07-31: disclosed
- patched: Fixed in version 2.0.0