{"id":7406,"date":"2026-11-11T19:20:38","date_gmt":"2026-11-11T19:20:38","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http"},"modified":"2026-11-11T19:23:12","modified_gmt":"2026-11-11T19:23:12","slug":"cve-2026-123811-dynatrace-mcp-server-unauthenticated-http","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http","title":{"rendered":"CVE-2026-123811: Dynatrace MCP Server Allowed Unauthenticated Tool Calls in HTTP Mode"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Dynatrace MCP Server versions before 2.0.0 accepted unauthenticated JSON-RPC tool calls when started with the <code>--http<\/code> flag, allowing network attackers to read Grail logs, security events, and user sessions or create notebooks under the server&#8217;s credentials. The flaw carried a CVSS score of 7.5 and was fixed in version 2.0.0 released on June 16, 2026.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> Dynatrace MCP Server in HTTP mode performed no authentication, session validation, or origin checks before dispatching MCP tool calls.<\/li><li><strong>Who is affected:<\/strong> Operators running versions before 2.0.0 with the <code>--http<\/code> flag, especially those binding to 0.0.0.0 or exposing the server on a network.<\/li><li><strong>Impact:<\/strong> Network attackers could invoke <code>execute_dql<\/code> to read arbitrary Grail data (logs, security events, user sessions) or <code>create_dynatrace_notebook<\/code> to write notebooks to the tenant.<\/li><li><strong>Fixed version:<\/strong> 2.0.0<\/li><li><strong>What to do:<\/strong> Upgrade to version 2.0.0 or later and set the <code>MCP_BEARER_TOKEN<\/code> environment variable when running in HTTP mode.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Dynatrace MCP Server is a tool that lets AI assistants query Dynatrace observability data. When you ran it with the <code>--http<\/code> flag, it started a web server that accepted commands from anyone on the network without checking a password. An attacker could send a command to read your logs, security events, or user session data, or create notebooks in your Dynatrace account. Version 2.0.0 fixes this by requiring a bearer token and checking the Host header. If you use this tool, upgrade to 2.0.0 and set a strong token in the <code>MCP_BEARER_TOKEN<\/code> environment variable. If you do not use Dynatrace MCP Server, you can ignore this issue.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Dynatrace MCP Server is an open-source Model Context Protocol server that connects AI assistants to Dynatrace observability data. When started with the <code>--http<\/code> flag, the server created an HTTP endpoint that accepted JSON-RPC <code>tools\/call<\/code> requests without any authentication, session validation, or Host or Origin header checks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Any network-reachable attacker could send a raw JSON-RPC request to invoke MCP tools directly under the victim server&#8217;s Dynatrace credentials. Two high-impact tools were confirmed reachable without authentication:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>execute_dql:<\/strong> Allowed an attacker to run arbitrary DQL queries and read logs, security events, user sessions, and metrics from the Dynatrace Grail data lake.<\/li><li><strong>create_dynatrace_notebook:<\/strong> Allowed an attacker to create notebooks visible in the victim&#8217;s Dynatrace tenant.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The advisory notes that the <code>send_event<\/code> tool was not exploitable via this vector because it included a <code>requestHumanApproval<\/code> gate that blocked unauthenticated HTTP callers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability was assigned CVE-2026-123811 and received a CVSS score of 7.5. The advisory was published on June 9, 2026, and the fix was released in version 2.0.0 on June 16, 2026.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Upgrade to version 2.0.0 or later:<\/p>\n\n\n\n<figure class=\"nx-code\" data-lang=\"bash\"><div class=\"nx-code__bar\"><span class=\"nx-code__label\">2.0.0 \u00b7 Bash<\/span><button type=\"button\" class=\"nx-code__copy\" aria-label=\"Copy code\" onclick=\"(function(b){var t=b.closest('.nx-code').querySelector('code').innerText;navigator.clipboard.writeText(t).then(function(){var o=b.textContent;b.textContent='Copied';setTimeout(function(){b.textContent=o},1500)})})(this)\">Copy<\/button><\/div><pre class=\"nx-code__pre\" tabindex=\"0\"><code class=\"language-bash\"><span class=\"nx-code__line\">npx -y @dynatrace-oss\/dynatrace-mcp-server@<span class=\"nx-tok-num\">2.0.0<\/span><\/span><\/code><\/pre><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">When running in HTTP mode, set a strong bearer token:<\/p>\n\n\n\n<figure class=\"nx-code\" data-lang=\"bash\"><div class=\"nx-code__bar\"><span class=\"nx-code__label\">Bash<\/span><button type=\"button\" class=\"nx-code__copy\" aria-label=\"Copy code\" onclick=\"(function(b){var t=b.closest('.nx-code').querySelector('code').innerText;navigator.clipboard.writeText(t).then(function(){var o=b.textContent;b.textContent='Copied';setTimeout(function(){b.textContent=o},1500)})})(this)\">Copy<\/button><\/div><pre class=\"nx-code__pre nx-code__pre--nums\" style=\"--nx-ln-start:1\" tabindex=\"0\"><code class=\"language-bash\"><span class=\"nx-code__line\"><span class=\"nx-tok-kw\">export<\/span> MCP_BEARER_TOKEN=$(openssl rand -base64 <span class=\"nx-tok-num\">32<\/span>)<\/span>\n<span class=\"nx-code__line\">npx -y @dynatrace-oss\/dynatrace-mcp-server@latest --http<\/span><\/code><\/pre><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Configure your MCP client to send the token in the <code>Authorization<\/code> header:<\/p>\n\n\n\n<figure class=\"nx-code\" data-lang=\"json\"><div class=\"nx-code__bar\"><span class=\"nx-code__label\">JSON<\/span><button type=\"button\" class=\"nx-code__copy\" aria-label=\"Copy code\" onclick=\"(function(b){var t=b.closest('.nx-code').querySelector('code').innerText;navigator.clipboard.writeText(t).then(function(){var o=b.textContent;b.textContent='Copied';setTimeout(function(){b.textContent=o},1500)})})(this)\">Copy<\/button><\/div><pre class=\"nx-code__pre nx-code__pre--nums\" style=\"--nx-ln-start:1\" tabindex=\"0\"><code class=\"language-json\"><span class=\"nx-code__line\">{<\/span>\n<span class=\"nx-code__line\">  <span class=\"nx-tok-str\">&quot;mcpServers&quot;<\/span>: {<\/span>\n<span class=\"nx-code__line\">    <span class=\"nx-tok-str\">&quot;dynatrace-http&quot;<\/span>: {<\/span>\n<span class=\"nx-code__line\">      <span class=\"nx-tok-str\">&quot;url&quot;<\/span>: <span class=\"nx-tok-str\">&quot;http:\/\/localhost:3000&quot;<\/span>,<\/span>\n<span class=\"nx-code__line\">      <span class=\"nx-tok-str\">&quot;transport&quot;<\/span>: <span class=\"nx-tok-str\">&quot;http&quot;<\/span>,<\/span>\n<span class=\"nx-code__line\">      <span class=\"nx-tok-str\">&quot;headers&quot;<\/span>: {<\/span>\n<span class=\"nx-code__line\">        <span class=\"nx-tok-str\">&quot;Authorization&quot;<\/span>: <span class=\"nx-tok-str\">&quot;Bearer your-token&quot;<\/span><\/span>\n<span class=\"nx-code__line\">      }<\/span>\n<span class=\"nx-code__line\">    }<\/span>\n<span class=\"nx-code__line\">  }<\/span>\n<span class=\"nx-code__line\">}<\/span><\/code><\/pre><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Version 2.0.0 also changes the default host binding from 0.0.0.0 to 127.0.0.1. If you need to expose the server on all interfaces (for example, in a container), you must now pass <code>--host 0.0.0.0<\/code> explicitly.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability demonstrates the risks of exposing MCP servers over HTTP without authentication. The Dynatrace MCP Server was designed primarily for local stdio transport, where the AI assistant and the server run on the same machine. The HTTP mode was added for remote access but initially lacked the authentication and origin checks necessary for network exposure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The fix introduces three layers of defense:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. <strong>Bearer token authentication:<\/strong> Version 2.0.0 enforces a bearer token check using constant-time comparison to resist timing attacks. If <code>MCP_BEARER_TOKEN<\/code> is not set, the server prints a warning but still starts (authentication is enforced only when the token is set).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. <strong>Host binding default:<\/strong> The default host binding changed from 0.0.0.0 to 127.0.0.1, preventing accidental exposure on all network interfaces.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. <strong>DNS rebinding protection:<\/strong> The server now restricts accepted Host headers to the configured server address and localhost aliases, blocking cross-origin POST requests from malicious web pages on the same network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The advisory also includes a proof-of-concept Docker setup and curl command demonstrating unauthenticated tool invocation. Operators who ran the server with <code>--http<\/code> and <code>--host 0.0.0.0<\/code> on a shared network or in a container with exposed ports were at highest risk.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-123811\" target=\"_blank\" rel=\"noreferrer noopener\">NVD CVE-2026-123811<\/a><\/li><li><a href=\"https:\/\/github.com\/dynatrace-oss\/dynatrace-mcp\/security\/advisories\/GHSA-p7w7-4929-vpj5\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Security Advisory GHSA-p7w7-4929-vpj5<\/a><\/li><li><a href=\"https:\/\/github.com\/dynatrace-oss\/dynatrace-mcp\/releases\/tag\/v2.0.0\" target=\"_blank\" rel=\"noreferrer noopener\">Dynatrace MCP Server v2.0.0 Release<\/a><\/li><li><a href=\"https:\/\/github.com\/dynatrace-oss\/dynatrace-mcp\/commit\/8f12972481e9165e8bd24d63b0a9e71976f85a43\" target=\"_blank\" rel=\"noreferrer noopener\">Commit 8f12972: Bearer token auth and HTTP server hardening<\/a><\/li><li><a href=\"https:\/\/github.com\/dynatrace-oss\/dynatrace-mcp\/commit\/ac5251edfcf9511c6c662414da743383e7d1451c\" target=\"_blank\" rel=\"noreferrer noopener\">Commit ac5251e: Default host binding to 127.0.0.1<\/a><\/li><li><a href=\"https:\/\/github.com\/dynatrace-oss\/dynatrace-mcp\/commit\/ead820322238633f5b289778c57faf5d3a8d73f9\" target=\"_blank\" rel=\"noreferrer noopener\">Commit ead8203: DNS rebinding protection<\/a><\/li><\/ul>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Dynatrace MCP Server versions before 2.0.0 accepted unauthenticated JSON-RPC tool calls when started with the &#8211;http flag, allowing network attackers to read Grail logs, security events, and user sessions or create notebooks under the server&#8217;s credentials.<\/p>\n","protected":false},"author":2,"featured_media":7404,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"high","_nx_sec_affected":"Dynatrace MCP Server versions before 2.0.0 when started with the --http flag","_nx_sec_status":"patch-available","_nx_sec_kicker":"URGENT: Dynatrace MCP Server exposed observability data without authentication","_nx_sec_type":"mcp","_nx_sec_vendor":"Dynatrace","_nx_sec_fixed":"2.0.0","_nx_sec_action":""},"categories":[65,11,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-7406","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-security","category-infrastructure","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-123811: Dynatrace MCP Server Unauth Flaw Fixed<\/title>\n<meta name=\"description\" content=\"CVE-2026-123811 let attackers invoke Dynatrace MCP Server tools without authentication in HTTP mode, exposing logs and data. Fixed in version 2.0.0.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-123811: Dynatrace MCP Server Unauth Flaw Fixed\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-123811 let attackers invoke Dynatrace MCP Server tools without authentication in HTTP mode, exposing logs and data. Fixed in version 2.0.0.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-11T19:20:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-11T19:23:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-123811: Dynatrace MCP Server Allowed Unauthenticated Tool Calls in HTTP Mode\",\"datePublished\":\"2026-11-11T19:20:38+00:00\",\"dateModified\":\"2026-11-11T19:23:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http\"},\"wordCount\":708,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp\",\"articleSection\":[\"AI Security\",\"Infrastructure\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http\",\"name\":\"CVE-2026-123811: Dynatrace MCP Server Unauth Flaw Fixed\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp\",\"datePublished\":\"2026-11-11T19:20:38+00:00\",\"dateModified\":\"2026-11-11T19:23:12+00:00\",\"description\":\"CVE-2026-123811 let attackers invoke Dynatrace MCP Server tools without authentication in HTTP mode, exposing logs and data. Fixed in version 2.0.0.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"A network cable plugged into a server rack in a dimly lit data center, with warning lights glowing amber on the equipment panels.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-123811: Dynatrace MCP Server Allowed Unauthenticated Tool Calls in HTTP Mode\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-123811: Dynatrace MCP Server Unauth Flaw Fixed","description":"CVE-2026-123811 let attackers invoke Dynatrace MCP Server tools without authentication in HTTP mode, exposing logs and data. Fixed in version 2.0.0.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-123811: Dynatrace MCP Server Unauth Flaw Fixed","og_description":"CVE-2026-123811 let attackers invoke Dynatrace MCP Server tools without authentication in HTTP mode, exposing logs and data. Fixed in version 2.0.0.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http","og_site_name":"i10X News","article_published_time":"2026-11-11T19:20:38+00:00","article_modified_time":"2026-11-11T19:23:12+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-123811: Dynatrace MCP Server Allowed Unauthenticated Tool Calls in HTTP Mode","datePublished":"2026-11-11T19:20:38+00:00","dateModified":"2026-11-11T19:23:12+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http"},"wordCount":708,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp","articleSection":["AI Security","Infrastructure","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http","name":"CVE-2026-123811: Dynatrace MCP Server Unauth Flaw Fixed","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp","datePublished":"2026-11-11T19:20:38+00:00","dateModified":"2026-11-11T19:23:12+00:00","description":"CVE-2026-123811 let attackers invoke Dynatrace MCP Server tools without authentication in HTTP mode, exposing logs and data. Fixed in version 2.0.0.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http-title.webp","width":1344,"height":768,"caption":"A network cable plugged into a server rack in a dimly lit data center, with warning lights glowing amber on the equipment panels."},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123811-dynatrace-mcp-server-unauthenticated-http#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-123811: Dynatrace MCP Server Allowed Unauthenticated Tool Calls in HTTP Mode"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7406","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7406"}],"version-history":[{"count":3,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7406\/revisions"}],"predecessor-version":[{"id":7466,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7406\/revisions\/7466"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7404"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7406"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7406"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7406"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7406"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7406"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}