Why it matters
dbt-mcp is an MCP server bridging LLM agents to dbt data-platform operations; leaking OAuth context lets a local attacker or malicious co-resident process impersonate the user's dbt Platform session through the agent's own tool integration.
Attack vector
The local OAuth helper's GET /dbt_platform_context endpoint is exposed without authentication or Host validation after a user completes the dbt Platform OAuth flow, returning the full platform context (potentially including tokens) to any local process or, if the port is reachable, any network caller.
Affected systems
dbt-mcp < 1.20.0
Mitigation
Upgrade to dbt-mcp 1.20.0.