| CVE-2026-14541 |
An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google…
|
8.0
High
|
Jul 31, 2026 |
| CVE-2026-14540 |
A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google…
|
8.0
High
|
Jul 31, 2026 |
| CVE-2026-14539 |
An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions…
|
6.6
Medium
|
Jul 31, 2026 |
| CVE-2026-14538 |
An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of…
|
5.7
Medium
|
Jul 31, 2026 |
| CVE-2026-14537 |
Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0…
|
8.1
High
|
Jul 31, 2026 |