CVE-2026-41490

HIGH 8.3

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

CVSS Score

8.3

EPSS Score

0.0%

EPSS Percentile

0th

Dagster is an orchestration platform for the development, production, and observation of data assets. Prior to Dagster Core version 1.13.1 and prior to Dagster libraries version 0.29.1, the DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would execute against the target database backend under the I/O manager's credentials. Only deployments that use dynamic partitions are affected. Pipelines using static or time-window partitions are not impacted. This issue has been patched in Dagster Core version 1.13.1 and Dagster libraries version 0.29.1.

CWE	CWE-89
Vendor	dagster-io
Product	dagster
Published	May 7, 2026

Stay Ahead of the Next One

Get instant alerts for dagster-io dagster

Be the first to know when new high vulnerabilities affecting dagster-io dagster are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Affected Versions

dagster-io / dagster

dagster < 1.13.1 dagster-duckdb < 0.29.1 dagster-snowflake < 0.29.1 dagster-gcp < 0.29.1 dagster-deltalake < 0.29.1 dagster-snowflake-polars < 0.29.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/dagster-io/dagster/security/advisories/GHSA-mjw2-v2hm-wj34 github.com: https://github.com/dagster-io/dagster/releases/tag/1.13.1