Vulnerabilities of Google MCP Toolbox for Databases (googleapis/mcp-toolbox)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-11720 | A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox | 9.3 Critical | Jun 29, 2026 |
| CVE-2026-11718 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of… | 9.3 Critical | Jun 18, 2026 |
| CVE-2026-11717 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of… | 9.3 Critical | Jun 18, 2026 |