CVE-2026-41490 dagster-io CVE debrief

Who should care

Defenders responsible for Dagster deployments that use dynamic partitions should assess exposure and prioritize patching. Users with the Add Dynamic Partitions permission should be aware of the potential for SQL injection attacks.

Why it matters

CVE-2026-41490 is a high-severity vulnerability in Dagster that allows for SQL injection attacks, impacting deployments that use dynamic partitions. Defenders should prioritize patching and verify affected deployments.

• Potential for SQL injection attacks against the target database backend
• Possible execution of arbitrary SQL under the I/O manager's credentials
• Need for verification of affected deployments and user permissions
• Priority for patching deployments that use dynamic partitions

Technical summary

The Dagster orchestration platform is vulnerable to SQL injection attacks due to improper construction of SQL WHERE clauses. A user with the Add Dynamic Partitions permission can create a partition key that injects arbitrary SQL, which would execute against the target database backend under the I/O manager's credentials. This issue affects deployments that use dynamic partitions and has been patched in Dagster Core version 1.13.1 and Dagster libraries version 0.29.1.

Defensive priority

Defenders should prioritize patching affected deployments that use dynamic partitions, as they are the only ones impacted by this vulnerability.

Recommended defensive actions

• Patch affected deployments that use dynamic partitions with Dagster Core version 1.13.1 and Dagster libraries version 0.29.1
• Verify that only deployments with dynamic partitions are impacted
• Review and restrict Add Dynamic Partitions permissions for users
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source references provide information on the vulnerability, its impact, and the patched versions. However, the exact scope of affected deployments and the number of potential victims are unknown.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.