The @dynatrace-oss/dynatrace-mcp-server package contains a vulnerability in the create_dynatrace_notebook tool where a required human-approval gate is missing. This omission allows an unauthenticated caller to create persistent tenant-visible notebooks with arbitrary content, including embedded DQL queries that execute under the permissions of any tenant user who opens the notebook. Unlike other write tools in the package, create_dynatrace_notebook does not require operator consent before execution. This vulnerability affects versions prior to 1.8.7.