{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/google-cloud-mcp-toolbox-for-databases-1.2.0-1.4.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:google:cloud_mcp_toolbox_for_databases:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-93328"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Google Cloud MCP Toolbox for Databases (1.2.0-1.4.0)"],"_cs_severities":["critical"],"_cs_tags":["path-traversal","cloud-storage","cve-2026-93328"],"_cs_type":"advisory","_cs_vendors":["Google"],"content_html":"\u003cp\u003eCVE-2026-93328 (GHSA-2gc9-c85v-5vwr) is a critical vulnerability in the cloud-storage source of the Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0. The vulnerability allows an unauthenticated remote attacker to perform path traversal and access host files because the internal path validation function only enforces a format contract rather than actual filesystem confinement. The tool executes with the ambient filesystem authority of the server process, enabling attackers to exfiltrate host files to external Google Cloud Storage buckets or overwrite arbitrary local files.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated remote attackers to read arbitrary files from the host filesystem (such as SSH keys or application secrets) or overwrite files, leading to full system compromise or persistence.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Google Cloud MCP Toolbox for Databases to a version beyond 1.4.0.\u003c/li\u003e\n\u003cli\u003eAfter upgrading, explicitly configure \u003ccode\u003eallowedBuckets\u003c/code\u003e and \u003ccode\u003eallowedLocalRoot\u003c/code\u003e options, as the default configuration may remain vulnerable even after patching.\u003c/li\u003e\n\u003cli\u003eImplement strict network isolation for any service running AI agent tooling to prevent reachability of the database toolbox from untrusted segments.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T08:31:46Z","date_published":"2026-10-27T08:31:46Z","id":"https://feed.craftedsignal.io/briefs/2026-10-google-mcp-toolbox-cve-93328/","summary":"An unauthenticated remote attacker can exploit CVE-2026-93328 in Google Cloud MCP Toolbox for Databases to perform arbitrary file exfiltration or local file overwriting due to insufficient path validation.","title":"Google Cloud MCP Toolbox for Databases: Path traversal and missing authorization (CVE-2026-93328)","url":"https://feed.craftedsignal.io/briefs/2026-10-google-mcp-toolbox-cve-93328/"}],"language":"en","title":"CraftedSignal Threat Feed - Google Cloud MCP Toolbox for Databases (1.2.0-1.4.0)","version":"https://jsonfeed.org/version/1.1"}