Tag

Cve-2026-93328

1 brief RSS

Google Cloud MCP Toolbox for Databases: Path traversal and missing authorization (CVE-2026-93328)

An unauthenticated remote attacker can exploit CVE-2026-93328 in Google Cloud MCP Toolbox for Databases to perform arbitrary file exfiltration or local file overwriting due to insufficient path validation.

Google Cloud MCP Toolbox for Databases path-traversal cloud-storage cve-2026-93328

2t 1c 1h ago