PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-10277 j3k0 CVE debrief

A vulnerability in j3k0/mcp-google-workspace affects the saveToDisk function in src/tools/gmail.ts of the MCP Gmail Tool component. The issue involves improper access controls that can be triggered through remote manipulation. The product uses a rolling release model, so specific version numbers for affected or fixed releases are not available. A patch has been committed to address this vulnerability.

Vendor
j3k0
Product
mcp-google-workspace
CVSS
LOW 2.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-01
Original CVE updated
2026-06-02
Advisory published
2026-06-01
Advisory updated
2026-06-02

Who should care

Organizations and developers using j3k0/mcp-google-workspace, particularly those exposing the MCP Gmail Tool in environments where remote access is possible. Security teams monitoring open-source dependencies for access control vulnerabilities.

Technical summary

The saveToDisk function in src/tools/gmail.ts of the MCP Gmail Tool component fails to enforce proper access controls, allowing remote attackers to manipulate the function and potentially perform unauthorized operations. The vulnerability exists in versions up to commit 831790e7d5c2663325733d9f5579cc339a267c4c. The fix is implemented in commit 89c091ecf8b9f9c7291d1af0b1966e271f86551c. CVSS 4.0 vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. CWE-266 (Incorrect Privilege Assignment) and CWE-284 (Improper Access Control) are identified as relevant weaknesses.

Defensive priority

LOW

Recommended defensive actions

  • Apply the patch commit 89c091ecf8b9f9c7291d1af0b1966e271f86551c to the mcp-google-workspace repository
  • Review access control logic in the saveToDisk function within src/tools/gmail.ts
  • Monitor GitHub issue #19 and pull request #22 for additional context or follow-up fixes
  • Assess exposure of MCP Gmail Tool deployments, particularly those accessible remotely
  • Consider implementing additional input validation and authorization checks for file operations

Evidence notes

The vulnerability was disclosed publicly on 2026-06-01. The exploit has been made public and could be used. The patch commit 89c091ecf8b9f9c7291d1af0b1966e271f86551c is available. References include the GitHub repository, issue #19, pull request #22, and Vuldb entries.

Official resources

Public