CVE-2026-123812

Notebook creation in Dynatrace skipped operator approval

Dynatrace · Dynatrace MCP Server

First documented disclosure · Review checkpoint

Summary

An MCP caller could create a persistent tenant notebook without the approval expected for write tools.

Severity and exploitation evidence

Low · 3.7/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources describe the vulnerability and its conditions. They do not identify malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Notebook creation omitted the interactive approval check used elsewhere for writes.

Conditions required

The tool is available to the caller and the configured credential can create a notebook.

Potential impact

A new notebook could appear with caller-supplied content. A later reader could run embedded queries under that reader’s permissions.

Affected versions and configurations

Through 1.8.6.

Fix and mitigation status

1.8.7.

Practical next steps

Upgrade to 1.8.7 or later and review tenant notebooks created by the affected integration.

Operating lesson

Test every persistent write operation for the expected human approval.

Evidence and limits

The missing approval permits notebook creation. Follow-on effects depend on a reader interacting with the content.

Sources