dbt allows Binding to an Unrestricted IP Address via socketsocket
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.
Summary
dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Prior to versions 1.6.15, 1.7.15, and 1.8.1, Binding to `INADDR_ANY (0.0.0.0)` or `IN6ADDR_ANY (::)` exposes an application on all network interfaces, increasing the risk of unauthorized access. As stated in the Python docs, a special form for address is accepted instead of a host address: `''` represents `INADDR_ANY`, equivalent to `"0.0.0.0"`. On systems with IPv6, '' represents `IN6ADDR_ANY`, which is equivalent to `"::"`. A user who serves docs on an unsecured public network, may unknowingly be hosting an unsecured (http) web site for any remote user/system to access on the same network. The issue has has been mitigated in dbt-core v1.6.15, dbt-core v1.7.15, and dbt-core v1.8.1 by binding to localhost explicitly by default in `dbt docs serve`.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| dbt-labs | dbt-core | before 1.6.15; 1.7.0 to before 1.7.15; = 1.8.0 | 1.6.15, 1.7.15 | Patch available | CNA |
| — | dbt-core (PyPI) | before 1.6.15 | 1.6.15 | Patch available | GHSA-pmrx-695r-4349 |
| — | dbt-core (PyPI) | 1.7.0 to before 1.7.15 | 1.7.15 | Patch available | GHSA-pmrx-695r-4349 |
| — | dbt-core (PyPI) | 1.8.0 to before 1.8.1 | 1.8.1 | Patch available | GHSA-pmrx-695r-4349 |
- dbt-core Vendordbt-labs Affected before 1.6.15; 1.7.0 to before 1.7.15; = 1.8.0 Fixed in 1.6.15, 1.7.15 Patch available CNA
- dbt-core (PyPI) Vendor— Affected before 1.6.15 Fixed in 1.6.15 Patch available GHSA-pmrx-695r-4349
- dbt-core (PyPI) Vendor— Affected 1.7.0 to before 1.7.15 Fixed in 1.7.15 Patch available GHSA-pmrx-695r-4349
- dbt-core (PyPI) Vendor— Affected 1.8.0 to before 1.8.1 Fixed in 1.8.1 Patch available GHSA-pmrx-695r-4349
CPE names CISA-ADP · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:dbt-labs:dbt-core:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:dbt-labs:dbt-core:1.8.0:*:*:*:*:*:*:* | 1.8.0 | — | — |
- cpe:2.3:a:dbt-labs:dbt-core:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:dbt-labs:dbt-core:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 — ·—
Remediation
- Fix · CNA dbt-core (dbt-labs) Fixed in 1.6.15, 1.7.15
- Fix · GHSA-pmrx-695r-4349 dbt-core (PyPI) Fixed in 1.6.15 Advisory →
- Fix · GHSA-pmrx-695r-4349 dbt-core (PyPI) Fixed in 1.7.15 Advisory →
- Fix · GHSA-pmrx-695r-4349 dbt-core (PyPI) Fixed in 1.8.1 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2024-36105
- 2026-10-03 Alias added: GHSA-pmrx-695r-4349
References
Other 12
- https://github.com/dbt-labs/dbt-core/security/advisories/GHSA-pmrx-695r-4349
- https://github.com/dbt-labs/dbt-core/issues/10209
- https://github.com/dbt-labs/dbt-core/pull/10208
- https://github.com/dbt-labs/dbt-core/commit/0c08d7a19ad1740be3cb0b2e6d9d64f6537176f7
- https://cwe.mitre.org/data/definitions/1327.html
- https://docs.python.org/3/library/socket.html#socket-families
- https://docs.securesauce.dev/rules/PY030
- https://github.com/dbt-labs/dbt-core/blob/main/core/dbt/task/docs/serve.py#L23C38-L23C39
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.6.15
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.7.15
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.8.1
- https://github.com/dbt-labs/dbt-core
More dbt-labs vulnerabilities
- TI-2026-74399 Unauthenticated SQL execution in dbt docs serve reads local files CVSS 4.0HIGH 8.2
- TI-2026-40302 dbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens CVSS 3.1MEDIUM 6.8
- TI-2026-32830 dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters CVSS 3.1MEDIUM 6.3
- TI-2026-32832 dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to… CVSS 3.1MEDIUM 4.3
- TI-2026-32831 Sensitive information in log files in dbt-labs dbt-mcp CVSS 3.1LOW 3.3
- TI-2026-28367 dbt has a Command Injection in Reusable Workflow via Unsanitized comment-body Output CVSS 4.0CRITICAL 9.3
Sources
- CVE-2024-36105 · CVE Program
- CVE-2024-36105 · NVD
- FIRST EPSS
- GHSA-pmrx-695r-4349 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences