CVE-2026-15829

A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of googleapis/mcp-toolbox. The tool accepts client-controlled parameters (data_col, timestamp_col, and id_cols) as plain strings and interpolates them unescaped via fmt.Sprintf directly into a generated AI.FORECAST table-valued SELECT statement. While MCP Toolbox utilizes an allowedDatasets mechanism to restrict queries, this defense only validates the history_data parameter; the final assembled query is executed without re-validation. An attacker can break out of the string literal fields (such as timestamp_col) to inject a valid multi-statement or cross-dataset query block. This allows an unauthorized user to bypass the operator-configured allowedDatasets boundary and read arbitrary BigQuery tables.

• CWE-89
• CWE-863

• https://github.com/googleapis/mcp-toolbox/pull/3324

Published

Jul 21, 2026

Last Modified

Jul 21, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-15812A vulnerability was found in the internal Access Control Lis…4.8
• CVE-2026-15813A vulnerability was found in the network packet de-fragmenta…6.5
• CVE-2026-15816A flaw was found in dracut. The die() error-handling functio…7.5
• CVE-2026-1582The WP All Export plugin for WordPress is vulnerable to Sens…3.7
• CVE-2026-15821The SureDash – Community, Courses & Member Dashboard plugin …6.4
• CVE-2026-15827The GutenKit Blocks plugin for WordPress is vulnerable to un…5.3
• CVE-2026-15830An issue was discovered in Django 5.2 before 5.2.17 and 6.0 …6.9
• CVE-2026-15831GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-1584A flaw was found in gnutls. A remote, unauthenticated attack…7.5
• CVE-2026-1585An unquoted Windows service executable path vulnerability in…8.4
• CVE-2026-1586A flaw has been found in Open5GS up to 2.7.5. Impacted is th…7.5
• CVE-2026-1587A vulnerability has been found in Open5GS up to 2.7.6. The a…7.5