CVE Feed

    Dashboard / CVE / CVE-2026-102242

    CVE-2026-102242

    Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool execution permissions to bypass directory boundary restrictions via symbolic links. Because path validation checks directories lexically without resolving symbolic links first, an attacker can access or overwrite arbitrary local files located outside the permitted root directories.

    Published:Sep 29, 2026
    Last Modified:Sep 29, 2026
    EPS:Sep 29, 2026
    EPSS Score:
    CVSS Score:8.6

    Affected Products

    Vendor
    Google
    Product
    Mcp Toolbox For Databases

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-93328 (CVSS 9.3) — Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (go…
    CVE-2026-16481 (CVSS 6) — A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-…
    CVE-2026-15829 (CVSS 8.6) — A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery …
    CVE-2026-11720 (CVSS 9.3) — A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructi…
    CVE-2026-11719 (CVSS 8.6) — An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope e…
    CVE-2026-11718 (CVSS 9.3) — An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken…
    CVE-2026-11717 (CVSS 9.3) — An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken…
    CVE-2026-11624 (CVSS 9.4) — The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all inco…
    CVE-2026-9739 (CVSS 9.4) — Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High