CVE-2026-102242CWE-22CWE-59path-traversal

CVE-2026-102242

published September 29, 2026

CVSS
8.6
EPSS
0%
Percentile
29.6
In the wild
Unconfirmed
What it is

Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool execution permissions to bypass directory boundary restrictions via symbolic links. Because path validation checks directories lexically without resolving symbolic links first, an attacker can access or overwrite arbitrary local files located outside the permitted root directories.

The record
Technical detail
CVSS
8.6 · NONE
CVSS v4.0
8.6 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00369 · 29.6th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-09-29T22:17Z
References (1)
https://github.com/googleapis/mcp-toolbox/pull/3810 · [email protected]
EPSS history
Timeline
  • 01 OCT 03:44Z
    EPSS moved — → 0%
    epss
  • 29 SEP 17:47Z
    Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases
    cvelistv5