dbt vulnerabilities

In dbt's reusable workflow open-issue-in-repo.yml, the output steps.issue_comment.outputs.comment-body is interpolated directly into a bash if statement without escaping. An attacker can inject arbitrary shell commands via a malicious comment.

dbt versions 2.0.0-alpha.0 through 2.0.0-alpha.5 expose an unauthenticated POST /api/v1/query endpoint in dbt docs serve, which passes caller-supplied SQL to DuckDbViewsBackend::query_arrow() without authorization or an allowlist. A client that can reach the server can invoke DuckDB filesystem-reading functions to read files available to the dbt process, including files outside the docs index directory.

dbt enables data analysts and engineers to transform data. When a user installs a package in dbt, it can override macros, materializations, and other core components by design, but a malicious package could override these with harmful code. This issue is fixed in versions 1.8.0, 1.6.14, and 1.7.14.