CVE-2026-102242
Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool execution permissions to bypass directory boundary restrictions via symbolic links. Because path validation checks directories lexically without resolving symbolic links first, an attacker can access or overwrite arbitrary local files located outside the permitted root directories.
| CWE | CWE-59 CWE-22 |
| Vendor | |
| Product | mcp toolbox for databases |
| Ecosystems | |
| Industries | Technology |
| Published | Sep 29, 2026 |
| Last Updated | Sep 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for google mcp toolbox for databases
Be the first to know when new unknown vulnerabilities affecting google mcp toolbox for databases are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Google / MCP Toolbox for Databases
1.2.0 ≤ 1.9.0
References
Credits
Emmanuel David Karganilla