Live › vulnerability › CVE-2026-93328
Go to dashboardGoogle Cloud MCP Toolbox for Databases, versions 1.2.0 through 1.4.0, has a path traversal and missing authorization flaw in its cloud-storage source. An unauthenticated remote attacker can send crafted tool invocation parameters to copy host files to external Google Cloud Storage buckets and overwrite arbitrary local files.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 16:02 UTC. All times on this page are UTC.
Teams that run Google Cloud MCP Toolbox for Databases in versions 1.2.0 through 1.4.0 with the cloud-storage source enabled are exposed, since the flaw is reachable through crafted tool invocations without authentication. Deployments without the cloud-storage source configured, or running outside the affected version range, are not described as affected.
No product ranges from the sources yet.
toolbox --version or the running container image tag; versions 1.2.0 through 1.4.0 are affected.tools.yaml).1.4.0; the sources do not name the fixed version, so check the googleapis/mcp-toolbox release notes.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.
This page as .md · .json · in your agent: get_signal("CVE-2026-93328")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.