{"id":8901,"date":"2026-11-13T19:28:19","date_gmt":"2026-11-13T19:28:19","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server"},"modified":"2026-11-13T19:28:19","modified_gmt":"2026-11-13T19:28:19","slug":"cve-2026-123810-dql-injection-dynatrace-mcp-server","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-123810-dql-injection-dynatrace-mcp-server","title":{"rendered":"CVE-2026-123810: DQL Injection in Dynatrace MCP Server Bypasses Read-Only Safeguards"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> CVE-2026-123810 is a DQL injection vulnerability in Dynatrace MCP Server that lets attackers inject arbitrary query stages through parameters documented as identifiers or timeframes.<\/li><li><strong>Who is affected:<\/strong> Users of Dynatrace MCP Server versions up to and including 1.8.5.<\/li><li><strong>What to do:<\/strong> Upgrade to version 2.1.1 or newer.<\/li><li><strong>Severity:<\/strong> Medium (CVSS 4.3).<\/li><li><strong>Status:<\/strong> Patch available.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Dynatrace MCP Server is a tool that connects AI agents to Dynatrace observability data. A security flaw let someone trick the server into running more powerful database queries than intended. The affected tools were marked as &#8220;read-only and safe to auto-approve, but an attacker could inject extra commands to see more data fields or ignore time limits. The flaw did not give access to data the user&#8217;s token could not already reach, but it broke the safety promise of the read-only tools. If you use Dynatrace MCP Server, update to version 2.1.1. If you do not use this tool, you can ignore this issue.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Several read capabilities in Dynatrace MCP Server interpolated caller-controlled values into Dynatrace Query Language (DQL) strings without sufficient validation or escaping. The affected capabilities were <code>find-monitored-entity-by-name.ts<\/code>, <code>list-problems.ts<\/code>, <code>list-vulnerabilities.ts<\/code>, <code>list-exceptions.ts<\/code>, and <code>get-events-for-cluster.ts<\/code>. These tools embedded parameters such as <code>entityNames<\/code>, <code>timeframe<\/code>, <code>clusterId<\/code>, and <code>kubernetesEntityId<\/code> directly into DQL queries.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Crafted parameter values could close string literals, append pipeline stages, or use <code>\/\/<\/code> line comments to discard the rest of the intended query. For example, an attacker could supply <code>entityNames = [&#x27;svc | fields id, name, tags \/\/&#x27;]<\/code> to inject a custom field-selection stage and suppress the tool&#8217;s original field list. Similarly, a <code>timeframe<\/code> value of <code>&#x27;30d, to: now() | fieldsAdd internal_secret \/\/&#x27;<\/code> would inject a new pipeline stage before the tool&#8217;s intended filter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability allowed callers to bypass the tools&#8217; documented field-scope, time-window, and display caps. The affected tools were annotated <code>readOnlyHint: true<\/code>, which some MCP clients treat as a signal to auto-approve. The injection turned these &#8220;safe&#8221; read tools into an arbitrary-DQL surface, breaking the tool contract and the auto-approval pathway.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dynatrace published security advisory GHSA-pqh8-p93p-2rx7 on June 9, 2026. The advisory notes that the marginal privilege ceiling is low because the operator&#8217;s token also exposes <code>execute_dql<\/code> with full DQL access. The injection does not grant new data access beyond what <code>execute_dql<\/code> already provides; the impact is the broken tool contract and the auto-approval pathway, not privilege escalation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Upgrade to Dynatrace MCP Server version 2.1.1 or newer. The fix, committed on July 14, 2026, adds a <code>dql-sanitize<\/code> utility with three guards: <code>validateTimeframe<\/code> rejects non-duration values, <code>validateAdditionalFilter<\/code> rejects pipe and newline characters, and <code>escapeDqlStringValue<\/code> escapes backslashes and double quotes before embedding values in DQL string literals. These guards are applied to all five affected capability files.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability highlights the risk of query-language injection in AI agent frameworks. MCP servers often expose read-only tools that clients may auto-approve based on the <code>readOnlyHint<\/code> annotation. When these tools interpolate untrusted input into query strings without proper escaping, an attacker (typically via prompt injection of an LLM) can bypass the tool&#8217;s documented constraints and access data outside the intended scope. While the Dynatrace flaw did not escalate privileges beyond the user&#8217;s existing token, it broke the safety contract of the read-only tools and could be exploited through prompt injection. Developers of MCP servers and similar agent tools should validate and escape all user-supplied parameters before embedding them in query languages.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/github.com\/dynatrace-oss\/dynatrace-mcp\/security\/advisories\/GHSA-pqh8-p93p-2rx7\" target=\"_blank\" rel=\"noreferrer noopener\">Dynatrace MCP Server Security Advisory GHSA-pqh8-p93p-2rx7<\/a><\/li><li><a href=\"https:\/\/github.com\/dynatrace-oss\/dynatrace-mcp\/releases\/tag\/v2.1.1\" target=\"_blank\" rel=\"noreferrer noopener\">Dynatrace MCP Server v2.1.1 Release<\/a><\/li><li><a href=\"https:\/\/github.com\/dynatrace-oss\/dynatrace-mcp\/commit\/15d3546c0618ffbaeaeca477337e08e92f2151bc\" target=\"_blank\" rel=\"noreferrer noopener\">Fix commit 15d3546<\/a><\/li><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-123810\" target=\"_blank\" rel=\"noreferrer noopener\">NVD CVE-2026-123810<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>A DQL injection flaw in Dynatrace MCP Server allowed callers to bypass field selection, time-window, and result-display limits in read-only tools by crafting malicious parameter values.<\/p>\n","protected":false},"author":2,"featured_media":8900,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"medium","_nx_sec_affected":"Dynatrace MCP Server versions up to and including 1.8.5","_nx_sec_status":"patch-available","_nx_sec_kicker":"ALERT: DQL Injection Breaks Read-Only Promise in Dynatrace MCP Server","_nx_sec_type":"mcp","_nx_sec_vendor":"Dynatrace","_nx_sec_fixed":"2.1.1","_nx_sec_action":""},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-8901","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-123810: DQL Injection in Dynatrace MCP Server<\/title>\n<meta name=\"description\" content=\"CVE-2026-123810 lets attackers inject DQL queries into Dynatrace MCP Server read tools, bypassing field limits and time windows. Fixed in v2.1.1.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-123810: DQL Injection in Dynatrace MCP Server\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-123810 lets attackers inject DQL queries into Dynatrace MCP Server read tools, bypassing field limits and time windows. Fixed in v2.1.1.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-13T19:28:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-123810: DQL Injection in Dynatrace MCP Server Bypasses Read-Only Safeguards\",\"datePublished\":\"2026-11-13T19:28:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server\"},\"wordCount\":565,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-13T19:28:19+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server\",\"name\":\"CVE-2026-123810: DQL Injection in Dynatrace MCP Server\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp\",\"datePublished\":\"2026-11-13T19:28:19+00:00\",\"description\":\"CVE-2026-123810 lets attackers inject DQL queries into Dynatrace MCP Server read tools, bypassing field limits and time windows. Fixed in v2.1.1.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123810-dql-injection-dynatrace-mcp-server#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-123810: DQL Injection in Dynatrace MCP Server Bypasses Read-Only Safeguards\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-123810: DQL Injection in Dynatrace MCP Server","description":"CVE-2026-123810 lets attackers inject DQL queries into Dynatrace MCP Server read tools, bypassing field limits and time windows. Fixed in v2.1.1.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-123810: DQL Injection in Dynatrace MCP Server","og_description":"CVE-2026-123810 lets attackers inject DQL queries into Dynatrace MCP Server read tools, bypassing field limits and time windows. Fixed in v2.1.1.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server","og_site_name":"i10X News","article_published_time":"2026-11-13T19:28:19+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-123810: DQL Injection in Dynatrace MCP Server Bypasses Read-Only Safeguards","datePublished":"2026-11-13T19:28:19+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server"},"wordCount":565,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-13T19:28:19+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server","name":"CVE-2026-123810: DQL Injection in Dynatrace MCP Server","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp","datePublished":"2026-11-13T19:28:19+00:00","description":"CVE-2026-123810 lets attackers inject DQL queries into Dynatrace MCP Server read tools, bypassing field limits and time windows. Fixed in v2.1.1.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123810-dql-injection-dynatrace-mcp-server-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123810-dql-injection-dynatrace-mcp-server#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-123810: DQL Injection in Dynatrace MCP Server Bypasses Read-Only Safeguards"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8901","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=8901"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8901\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/8900"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=8901"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=8901"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=8901"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=8901"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=8901"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}