CVE-2026-93328

Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write

Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox)

Open in Threatline Record JSON

CVSS

9.3Critical

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet

Fixed in1.5.0Fixed versionCVE List

Published26 Oct 2026Updated 26 Oct 2026CVE List

What fixes it

1.5.0MCP Toolbox for Databases (googleapis/mcp-toolbox)CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.

Text from CVE List

Affected versions 1

MCP Toolbox for Databases (googleapis/mcp-toolbox)affected: 1.2.0 before 1.5.0CVE List

References 1

github.com/googleapis/mcp-toolbox/pull/3454Referencevia CVE List