CVE-2026-93328 Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write

CriticalCVSS 9.3 EPSS 0.53%

Published: 2026-10-26 16:24
Updated: 2026-10-26 19:17
Exploit status: No public exploit known

Description

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.

Affected products

Product	Affected versions	Fixed in
Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox)	>= 1.2.0, < 1.5.0	1.5.0

References

github.com

CVSS v4.0

9.3 Critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Vulnerable System Confidentiality: High
Vulnerable System Integrity: High
Vulnerable System Availability: High
Subsequent System Confidentiality: Low
Subsequent System Integrity: Low
Subsequent System Availability: Low
U: Amber

All scores (2)

v4.0 9.3 · googlecloud
v4.0 9.3 · f45cbf4e-4146-4068-b7e1-655ffc2c548c

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.53% (percentile 45.1)
CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-862 Missing Authorization

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.