https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-28T22:54:38.180905+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-93328 fkie_cve-2026-93328 2026-10-28T22:54:38.201022+00:00

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.

 https://db.gcve.eu/vuln/ghsa-2gc9-c85v-5vwr GHSA-2gc9-c85v-5vwr 2026-10-28T22:54:38.201094+00:00

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.