CVE-2026-100406: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in dbt-labs dbt-core

dbt-labs dbt-core versions >=2.0.0-alpha.0 and <2.0.0-alpha.5 contain a path traversal vulnerability in the dbt docs serve component. The unauthenticated POST /api/v1/query endpoint passes user-supplied SQL to DuckDbViewsBackend::query_arrow() without authorization or allowlisting. This allows an attacker who can reach the server to invoke DuckDB filesystem-reading functions, potentially reading arbitrary files accessible to the dbt process, including files outside the intended docs index directory. By default, the server binds to localhost, limiting exposure, but operators can configure it to listen on external interfaces, increasing risk. The vulnerability is addressed in version 2.0.0-alpha.5.

An attacker with network access to the vulnerable dbt docs serve endpoint can read arbitrary files accessible to the dbt process by exploiting the path traversal vulnerability. This can lead to unauthorized disclosure of sensitive information stored on the filesystem. There is no indication of privilege escalation or remote code execution from the provided data. The default localhost binding reduces exposure, but misconfiguration can expose the service externally, increasing risk.

Upgrade dbt-core to version 2.0.0-alpha.5 or later, where this vulnerability is fixed. If upgrading is not immediately possible, ensure that the dbt docs serve endpoint is not exposed to untrusted networks by keeping the server bound to localhost and restricting network access. Monitor configuration settings such as the host option or DBT_DOCS_HOST to prevent unintended exposure. Patch status is confirmed fixed in 2.0.0-alpha.5.