Vulnerability · Published Oct 26, 2026 · Assigned by GoogleCloud
CVE-2026-93328Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write
Critical 9.3
In plain English
A critical-severity missing authorization in MCP Toolbox for Databases (googleapis/mcp-toolbox) from Google Cloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Google Cloud | MCP Toolbox for Databases (googleapis/mcp-toolbox) | 1.2.0 – before 1.5.0 |
Weakness: CWE-862, CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber