---
id: CVE-2024-40637
aliases:
  - GHSA-p3f3-5ccg-83xq
  - PYSEC-2024-66
title: >-
  dbt has an implicit override for built-in materializations from installed
  packages
summary: >-
  dbt has an implicit override for built-in materializations from installed
  packages
severity: medium
cvss: 4.2
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L'
vendor: dbt-core
product: dbt-core
ecosystem: pip
affected:
  - 'dbt-core >= 1.6.0, < 1.6.14'
  - 'dbt-core >= 1.7.0, < 1.7.14'
patched:
  - dbt-core 1.6.14
  - dbt-core 1.7.14
published: '2024-07-17'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:50:16.795425631Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-p3f3-5ccg-83xq'
references:
  - url: >-
      https://github.com/dbt-labs/dbt-core/security/advisories/GHSA-p3f3-5ccg-83xq
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-40637'
  - url: >-
      https://github.com/dbt-labs/dbt-core/commit/3c82a0296d227cb1be295356df314c11716f4ff6
  - url: >-
      https://github.com/dbt-labs/dbt-core/commit/87ac4deb00cc9fe334706e42a365903a1d581624
  - url: 'https://docs.getdbt.com/docs/build/packages'
  - url: >-
      https://docs.getdbt.com/reference/global-configs/legacy-behaviors#behavior-change-flags
  - url: 'https://github.com/dbt-labs/dbt-core'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/dbt-core/PYSEC-2024-66.yaml
  - url: >-
      https://tempered.works/posts/2024/07/06/preventing-data-theft-with-gcp-service-controls
  - url: >-
      https://www.elementary-data.com/post/are-dbt-packages-secure-the-answer-lies-in-your-dwh-policies
  - url: >-
      https://www.equalexperts.com/blog/tech-focus/are-you-at-risk-from-this-critical-dbt-vulnerability
tags:
  - osv
  - pip
epss: 0.00372
epssPercentile: 0.28361
ingestedAt: '2026-09-12T03:13:01.714Z'
---

## Overview

### Impact
_What kind of vulnerability is it? Who is impacted?_

When a user installs a [package](https://docs.getdbt.com/docs/build/packages) in dbt, it has the ability to override macros, materializations, and other core components of dbt. This is by design, as it allows packages to extend and customize dbt's functionality. However, this also means that a malicious package could potentially override these components with harmful code.

### Patches
_Has the problem been patched? What versions should users upgrade to?_

Fixed on 1.8.0, and patched for 1.6.14 and 1.7.14 releases.

### Workarounds
_Is there a way for users to fix or remediate the vulnerability without upgrading?_

Previously, a materialization defined in a package that shared a name with one of the built-in materializations would be preferred by default, without user action which is surprising and makes it more difficult to detect the insecure behaviour. We've changed the default behaviour to require explicit overrides by users in `1.8.0`, and provided the ability to opt-out of built-in materialization overrides in 1.6 and 1.7 via the `flags.require_explicit_package_overrides_for_builtin_materializations: False` configuration in `dbt_project.yml`

Versions older than 1.6 are EOL.

### References
_Are there any links users can visit to find out more?_
* dbt documentation: https://docs.getdbt.com/reference/global-configs/legacy-behaviors#behavior-change-flags
* https://www.elementary-data.com/post/are-dbt-packages-secure-the-answer-lies-in-your-dwh-policies
* https://www.equalexperts.com/blog/tech-focus/are-you-at-risk-from-this-critical-dbt-vulnerability/
* https://tempered.works/posts/2024/07/06/preventing-data-theft-with-gcp-service-controls/

## Affected packages

- `dbt-core >= 1.6.0, < 1.6.14`
- `dbt-core >= 1.7.0, < 1.7.14`

## Remediation

Upgrade to a patched release:

- `dbt-core 1.6.14`
- `dbt-core 1.7.14`