Vulnerabilities of Google MCP Toolbox for Databases
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-102242 | Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for… | 8.6 High | Sep 29, 2026 |
| CVE-2026-11624 | The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming… | 9.4 Critical | Jun 13, 2026 |
| CVE-2026-9739 | Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790) | 9.4 Critical | May 27, 2026 |