An SQL injection vulnerability in Dagster allows authenticated users with partition creation rights to execute arbitrary database queries, creating significant risk for connected data warehouses.

This is an SQL injection flaw (CWE-89) where I/O managers for DuckDB, Snowflake, BigQuery, and DeltaLake construct SQL WHERE clauses by interpolating dynamic partition key values without proper escaping, requiring low privileges to exploit.

A successful exploit could allow an authenticated attacker to execute arbitrary SQL statements against the target database backend, potentially leading to unauthorized data access, modification, or data destruction. Given the high CVSS score of 8.3, the flaw poses a severe threat to the confidentiality and integrity of enterprise data pipelines and associated data assets.

Immediate Action: Update Dagster Core to version 1.13.1 and associated Dagster libraries to version 0.29.1 immediately.

Proactive Monitoring: Monitor database query logs for unusual SQL syntax or unauthorized access attempts originating from the Dagster I/O manager service accounts.

Compensating Controls: Restrict the Add Dynamic Partitions permission to trusted users only and implement database-level permission boundaries for the I/O manager service accounts.

Public Exploit Available: Yes, a public proof-of-concept repository exists on GitHub (https://github.com/romain-deperne/CVE-2026-41490).

Administrators must treat this vulnerability with high urgency due to the availability of a public proof-of-concept and the potential for severe database compromise. Immediate patching of Dagster Core and related libraries to the specified fixed versions is required to neutralize the threat.