CVE-2026-123811

Dynatrace MCP HTTP clients could act using the server’s credentials

Dynatrace · Dynatrace MCP Server

First documented disclosure · Review checkpoint

Summary

An unauthenticated client could reach enabled observability tools in a network-accessible HTTP deployment.

Severity and exploitation evidence

High · 7.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources describe the vulnerability and its conditions. They do not identify malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The HTTP transport dispatched tool calls without checking the caller’s identity, session, host or origin.

Conditions required

The server runs in HTTP mode, is reachable by the caller and has configured Dynatrace credentials.

Potential impact

The caller could read permitted monitoring data or create notebooks in the tenant. The advisory distinguishes write tools with separate approval checks.

Affected versions and configurations

The CNA lists versions before 2.0.0. The upstream table lists versions through 1.8.7.

Fix and mitigation status

2.0.0.

Practical next steps

Install 2.0.0 or later, restrict the listener and review the scopes granted to its Dynatrace credentials.

Operating lesson

Authenticate each remote tool caller independently of the service credential.

Evidence and limits

The reported exposure is specific to reachable HTTP deployments.

Sources