PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-10277 j3k0 CVE debrief

A vulnerability in j3k0/mcp-google-workspace affects the saveToDisk function in src/tools/gmail.ts of the MCP Gmail Tool component. The issue involves improper access controls that can be triggered through remote manipulation. The product uses a rolling release model, so specific version numbers for affected or fixed releases are not available. A patch has been committed to address this vulnerability.

Vendor
j3k0
Product
mcp-google-workspace
CVSS
LOW 2.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-01
Original CVE updated
2026-07-22
Advisory published
2026-06-01
Advisory updated
2026-07-22

Who should care

Organizations and developers using j3k0/mcp-google-workspace, particularly those exposing the MCP Gmail Tool in environments where remote access is possible. Security teams monitoring open-source dependencies for access control vulnerabilities.

Technical summary

The saveToDisk function in src/tools/gmail.ts of the MCP Gmail Tool component fails to enforce proper access controls, allowing remote attackers to manipulate the function and potentially perform unauthorized operations. The vulnerability exists in versions up to commit 831790e7d5c2663325733d9f5579cc339a267c4c. The fix is implemented in commit 89c091ecf8b9f9c7291d1af0b1966e271f86551c. CVSS 4.0 vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. CWE-266 (Incorrect Privilege Assignment) and CWE-284 (Improper Access Control) are identified as relevant weaknesses.

Defensive priority

LOW

Recommended defensive actions

  • Apply the patch commit 89c091ecf8b9f9c7291d1af0b1966e271f86551c to the mcp-google-workspace repository
  • Review access control logic in the saveToDisk function within src/tools/gmail.ts
  • Monitor GitHub issue #19 and pull request #22 for additional context or follow-up fixes
  • Assess exposure of MCP Gmail Tool deployments, particularly those accessible remotely
  • Consider implementing additional input validation and authorization checks for file operations

Evidence notes

The vulnerability was disclosed publicly on 2026-06-01. The exploit has been made public and could be used. The patch commit 89c091ecf8b9f9c7291d1af0b1966e271f86551c is available. References include the GitHub repository, issue #19, pull request #22, and Vuldb entries.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-10277 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-10277

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-10277 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-10277

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.