4 min read
News Brief CVE-2026-93328 (CVSS 4.0 9.3, CNA score) hits the cloud-storage source in Google's MCP Toolbox for Databases 1.2.0 through 1.4.0. A June change that appears to address it, in 1.5.0, adds allowlists that are off unless configured.