{"id":"CVE-2026-93328","aliases":["EUVD-2026-109936","GHSA-2gc9-c85v-5vwr"],"status":"published","title":"Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write","description":"Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00526,"percentile":0.44887,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22","CWE-862"],"published":"2026-10-26T14:24:09Z","modified":"2026-10-28T03:01:41Z","exploits":[{"source":"pocgithub","id":"sustilliano/cve-2026-93328-gate","title":"sustilliano/cve-2026-93328-gate","date":"2026-10-27","url":"https://github.com/sustilliano/cve-2026-93328-gate"}],"products":[{"vendor":"google","product":"mcp toolbox for databases (googleapis/mcp-toolbox)"},{"vendor":"google cloud","product":"mcp toolbox for databases (googleapis/mcp-toolbox)"}],"references":[{"url":"https://github.com/googleapis/mcp-toolbox/pull/3454","tags":["fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93328"},{"url":"https://github.com/advisories/GHSA-2gc9-c85v-5vwr"}],"sources":{"cve":[{"id":"CVE-2026-93328","title":"Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write","description":"Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.","status":"published","published":"2026-10-26T14:24:09.012Z","modified":"2026-10-26T16:46:45.879Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber","level":"critical","assessor":"cna"}],"cwes":["CWE-862","CWE-22"],"updated_at":"2026-11-02T14:19:54.122945Z"}],"euvd":[{"id":"EUVD-2026-109936","description":"Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.","status":"published","published":"2026-10-26T14:24:09Z","modified":"2026-10-26T16:46:45Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber","level":"critical"}],"updated_at":"2026-11-02T16:59:29.132426Z"}],"ghsa":[{"id":"GHSA-2gc9-c85v-5vwr","title":"Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for...","description":"Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.","status":"published","published":"2026-10-26T15:34:48Z","modified":"2026-10-26T15:34:54Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","level":"critical"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:14:24.666824Z"}],"nvd":[{"id":"CVE-2026-93328","description":"Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.","status":"published","published":"2026-10-26T15:16:45.813Z","modified":"2026-10-26T17:17:31.02Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","level":"critical","assessor":"secondary"}],"cwes":["CWE-22","CWE-862"],"updated_at":"2026-11-02T14:13:03.452847Z"}],"osv":[{"id":"CVE-2026-93328","description":"Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.","status":"published","published":"2026-10-26T15:16:45.813Z","modified":"2026-10-28T03:01:41.81479514Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","level":"critical"}],"updated_at":"2026-11-02T15:45:20.931171Z"}]}}