Vulnerabilities of Google MCP Toolbox for Databases
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-11624 | The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming… | 9.4 Critical | Jun 13, 2026 |
| CVE-2026-9739 | Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790) | 9.4 Critical | May 27, 2026 |