CVE-2026-93328 - Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write
CVE ID :CVE-2026-93328 Published : Oct. 26, 2026, 3:16 p.m. | 1 hour, 6 minutes ago Description :Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote...