https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 05 Aug 2026 09:03:52 +0000 https://vulnerability.circl.lu/sighting/bd563105-31d3-4288-a789-23fc9ad8b9fd/export {"uuid": "bd563105-31d3-4288-a789-23fc9ad8b9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-xrmj-5g4g-8987", "type": "seen", "source": "https://gist.github.com/alon710/e1fe3e68fe3d799c84bb3e82e35d7e46", "content": "# GHSA-XRMJ-5G4G-8987: GHSA-xrmj-5g4g-8987: Workflow Template Injection in @dynatrace-oss/dynatrace-mcp-server\n\n> **CVSS Score:** 4.2\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/GHSA-XRMJ-5G4G-8987\n\n## Summary\nA template injection vulnerability in @dynatrace-oss/dynatrace-mcp-server allows untrusted input to be interpolated directly into Dynatrace Workflows using Jinja2 syntax, leading to persistent data exposure and exfiltration.\n\n## TL;DR\nThe @dynatrace-oss/dynatrace-mcp-server before v2.0.0 allowed attackers to perform template injection into Dynatrace Workflow templates. This allows arbitrary Jinja2 template execution that persists on the tenant even after the session ends.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1336\n- **Attack Vector**: Network\n- **CVSS v3.1**: 4.2\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n- **Weakness Name**: Improper Neutralization of Special Elements Used in a Template Engine\n\n## Affected Systems\n\n- @dynatrace-oss/dynatrace-mcp-server\n- **@dynatrace-oss/dynatrace-mcp-server**: < 2.0.0 (Fixed in: `2.0.0`)\n\n## Mitigation\n\n- Completely decommission the create_workflow_for_notification and make_workflow_public capabilities by upgrading the package to v2.0.0.\n- Audit active workflows in the Dynatrace UI to identify and delete any workflows created by the MCP server containing injected Jinja2 payloads.\n- Implement strong human-in-the-loop review guidelines to examine literal templating syntax during tool execution confirmations.\n\n**Remediation Steps:**\n1. Run 'npm install @dynatrace-oss/dynatrace-mcp-server@latest' to update the MCP server to a patched release (2.0.0 or higher).\n2. Restart the MCP server daemon to ensure that older, vulnerable capabilities are no longer exposed to LLM clients.\n3. Retrieve the list of active workflows from the Dynatrace Automation API and search for '[MCP POC]' strings in the workflow titles.\n4. Analyze the parameters of existing alert workflows for curly-brace structures such as '{{ event() }}' or '{{ environment() }}' and delete any unauthorized entries.\n\n## References\n\n- [GitHub Advisory Database](https://github.com/advisories/GHSA-xrmj-5g4g-8987)\n- [Repository Security Advisory](https://github.com/dynatrace-oss/dynatrace-mcp/security/advisories/GHSA-xrmj-5g4g-8987)\n- [Patch Commit](https://github.com/dynatrace-oss/dynatrace-mcp/commit/64dfcb1095823d0fb43013635446288a6ff60e29)\n- [Pull Request #547](https://github.com/dynatrace-oss/dynatrace-mcp/pull/547)\n- [Release Tag v2.0.0](https://github.com/dynatrace-oss/dynatrace-mcp/releases/tag/v2.0.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-XRMJ-5G4G-8987) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T16:33:01.031158Z"} {"uuid": "bd563105-31d3-4288-a789-23fc9ad8b9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-xrmj-5g4g-8987", "type": "seen", "source": "https://gist.github.com/alon710/e1fe3e68fe3d799c84bb3e82e35d7e46", "content": "# GHSA-XRMJ-5G4G-8987: GHSA-xrmj-5g4g-8987: Workflow Template Injection in @dynatrace-oss/dynatrace-mcp-server\n\n> **CVSS Score:** 4.2\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/GHSA-XRMJ-5G4G-8987\n\n## Summary\nA template injection vulnerability in @dynatrace-oss/dynatrace-mcp-server allows untrusted input to be interpolated directly into Dynatrace Workflows using Jinja2 syntax, leading to persistent data exposure and exfiltration.\n\n## TL;DR\nThe @dynatrace-oss/dynatrace-mcp-server before v2.0.0 allowed attackers to perform template injection into Dynatrace Workflow templates. This allows arbitrary Jinja2 template execution that persists on the tenant even after the session ends.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1336\n- **Attack Vector**: Network\n- **CVSS v3.1**: 4.2\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n- **Weakness Name**: Improper Neutralization of Special Elements Used in a Template Engine\n\n## Affected Systems\n\n- @dynatrace-oss/dynatrace-mcp-server\n- **@dynatrace-oss/dynatrace-mcp-server**: < 2.0.0 (Fixed in: `2.0.0`)\n\n## Mitigation\n\n- Completely decommission the create_workflow_for_notification and make_workflow_public capabilities by upgrading the package to v2.0.0.\n- Audit active workflows in the Dynatrace UI to identify and delete any workflows created by the MCP server containing injected Jinja2 payloads.\n- Implement strong human-in-the-loop review guidelines to examine literal templating syntax during tool execution confirmations.\n\n**Remediation Steps:**\n1. Run 'npm install @dynatrace-oss/dynatrace-mcp-server@latest' to update the MCP server to a patched release (2.0.0 or higher).\n2. Restart the MCP server daemon to ensure that older, vulnerable capabilities are no longer exposed to LLM clients.\n3. Retrieve the list of active workflows from the Dynatrace Automation API and search for '[MCP POC]' strings in the workflow titles.\n4. Analyze the parameters of existing alert workflows for curly-brace structures such as '{{ event() }}' or '{{ environment() }}' and delete any unauthorized entries.\n\n## References\n\n- [GitHub Advisory Database](https://github.com/advisories/GHSA-xrmj-5g4g-8987)\n- [Repository Security Advisory](https://github.com/dynatrace-oss/dynatrace-mcp/security/advisories/GHSA-xrmj-5g4g-8987)\n- [Patch Commit](https://github.com/dynatrace-oss/dynatrace-mcp/commit/64dfcb1095823d0fb43013635446288a6ff60e29)\n- [Pull Request #547](https://github.com/dynatrace-oss/dynatrace-mcp/pull/547)\n- [Release Tag v2.0.0](https://github.com/dynatrace-oss/dynatrace-mcp/releases/tag/v2.0.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-XRMJ-5G4G-8987) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T16:33:01.031158Z"} https://vulnerability.circl.lu/sighting/bd563105-31d3-4288-a789-23fc9ad8b9fd/export Fri, 31 Jul 2026 16:33:01 +0000