GHSA-xrmj-5g4g-8987: @dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
Summary
The Dynatrace MCP server has a template injection vulnerability (a security flaw where attackers can embed code in input fields that gets executed) in its `create_workflow_for_notification` tool. When a caller provides values for team name, problem type, or channel, these are inserted directly into a Dynatrace Workflow definition that uses Jinja2 templating (a system that evaluates expressions in double braces like {{ }}). This allows an attacker to embed Jinja2 expressions that extract sensitive event data and send it to attacker-controlled locations, and the malicious workflow persists in the tenant even after the user session ends.
Classification
Affected Vendors
Affected Packages
Related Issues
Original source: https://github.com/advisories/GHSA-xrmj-5g4g-8987
First tracked: July 31, 2026 at 02:01 PM
Classified by LLM (prompt v3) · confidence: 85%