Skip to content
OpenAdvisories

Product · Google

MCP Toolbox for Databases

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-102242

    Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases

    Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool execution permissions to bypass directory boundary restrictio…

    Google MCP Toolbox for Databases