Vulnerability · Published Oct 14, 2026 · Assigned by GitHub_M

CVE-2026-100406dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`

High 8.2

In plain English

A high-severity path traversal in dbt-core from dbt-labs. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).

Severity (CVSS 4.0)8.2High

Exploit odds (30 days)0.4%top 63.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. From 2.0.0-alpha.0 until 2.0.0-alpha.5, dbt docs serve exposes the unauthenticated POST /api/v1/query endpoint in crates/dbt-docs-server/src/handlers/query.rs, which passes caller-supplied SQL to DuckDbViewsBackend::query_arrow() in crates/dbt-index-core/src/backend.rs without authorization or an allowlist. A client that can reach the server can invoke DuckDB filesystem-reading functions to read files available to the dbt process, including files outside the docs index directory. The server binds to localhost by default, but operators can expose it to a network through the host option or DBT_DOCS_HOST setting. This issue is fixed in version 2.0.0-alpha.5.

Affected products (as reported)

Vendor	Product	Versions
dbt-labs	dbt-core	>= 2.0.0-alpha.0, < 2.0.0-alpha.5

Weakness: CWE-22, CWE-200, CWE-306 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://github.com/dbt-labs/dbt/security/advisories/GHSA-h2j2-2r7g-rff8 x_refsource_CONFIRM
https://github.com/dbt-labs/dbt/commit/3a5d26fe02b58382720d04cbd87143b7b6775413 x_refsource_MISC
https://github.com/dbt-labs/dbt/releases/tag/v2.0.0-alpha.5 x_refsource_MISC