{"id":"CVE-2026-15829","summary":"SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox","details":"A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of googleapis/mcp-toolbox.\n\nThe tool accepts client-controlled parameters (data_col, timestamp_col, and id_cols) as plain strings and interpolates them unescaped via fmt.Sprintf directly into a generated AI.FORECAST table-valued SELECT statement. While MCP Toolbox utilizes an allowedDatasets mechanism to restrict queries, this defense only validates the history_data parameter; the final assembled query is executed without re-validation.\n\nAn attacker can break out of the string literal fields (such as timestamp_col) to inject a valid multi-statement or cross-dataset query block. This allows an unauthorized user to bypass the operator-configured allowedDatasets boundary and read arbitrary BigQuery tables.","modified":"2026-07-24T03:56:50.975255921Z","published":"2026-07-21T16:39:54.968Z","database_specific":{"cwe_ids":["CWE-863","CWE-89"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15829.json","cna_assigner":"Google"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15829.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15829"},{"type":"FIX","url":"https://github.com/googleapis/mcp-toolbox/pull/3324"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/googleapis/mcp-toolbox","events":[{"introduced":"1a6dfe8d37d0f42fb3fd3f75c50988534dbc1b85"},{"last_affected":"b0010060a939455d91e4f8ba62dc3e72b1892469"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"0.13.0"},{"last_affected":"1.3.0"}]}}],"versions":["v1.3.0","v1.2.0","v1.1.0","v1.0.0","v0.32.0","v0.31.0","v0.30.0","v0.29.0","v0.28.0","v0.27.0","v0.26.0","v0.25.0","v0.24.0","v0.23.0","v0.22.0","v0.21.0","v0.20.0","v0.19.1","v0.18.0","v0.17.0","v0.16.0","v0.15.0","v0.14.0","v0.13.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15829.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}]}