CVE ID :CVE-2026-102242 Published : Sept. 29, 2026, 5:47 p.m. | 28 minutes ago Description :Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-102242 - Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases

VERWANDTEARTIKEL

CVE-2025-14564

CVE-2026-103591 - DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file

CVE-2026-101283 - iperf3 Heap Buffer Overflow

CVE-2026-51570 - ModelScope AgentScope Path Traversal Vulnerability

CVE-2026-102997 - pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

CVE-2026-102998 - pypdf: Possible long runtimes when generating appearance streams