Cpe:2.3:a:google:cloud_mcp_toolbox_for_databases:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3agooglecloud_mcp_toolbox_for_databases/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 08:31:46 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgGoogle Cloud MCP Toolbox for Databases: Path traversal and missing authorization (CVE-2026-93328)https://feed.craftedsignal.io/briefs/2026-10-google-mcp-toolbox-cve-93328/Tue, 27 Oct 2026 08:31:46 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-google-mcp-toolbox-cve-93328/An unauthenticated remote attacker can exploit CVE-2026-93328 in Google Cloud MCP Toolbox for Databases to perform arbitrary file exfiltration or local file overwriting due to insufficient path validation.CVE-2026-93328 (GHSA-2gc9-c85v-5vwr) is a critical vulnerability in the cloud-storage source of the Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0. The vulnerability allows an unauthenticated remote attacker to perform path traversal and access host files because the internal path validation function only enforces a format contract rather than actual filesystem confinement. The tool executes with the ambient filesystem authority of the server process, enabling attackers to exfiltrate host files to external Google Cloud Storage buckets or overwrite arbitrary local files.

Impact

Successful exploitation allows unauthenticated remote attackers to read arbitrary files from the host filesystem (such as SSH keys or application secrets) or overwrite files, leading to full system compromise or persistence.

Recommendation

  • Upgrade Google Cloud MCP Toolbox for Databases to a version beyond 1.4.0.
  • After upgrading, explicitly configure allowedBuckets and allowedLocalRoot options, as the default configuration may remain vulnerable even after patching.
  • Implement strict network isolation for any service running AI agent tooling to prevent reachability of the database toolbox from untrusted segments.
]]>criticaladvisorypath-traversalcloud-storagecve-2026-93328