Google MCP Toolbox for Databases (googleapis/mcp-toolbox) vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Latest Google MCP Toolbox for Databases (googleapis/mcp-toolbox) vulnerabilities

CVE-2026-102242 — Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases (CVSS 8.6)
CVE-2026-14541 — Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider (CVSS 7.5)
CVE-2026-14540 — Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox (CVSS 6.1)
CVE-2026-14539 — Denial of Service via Unrestricted Payload Buffering in MCP Toolbox (CVSS 7.5)
CVE-2026-14538 — BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox (CVSS 7.7)
CVE-2026-14537 — Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints (CVSS 9.8)
CVE-2026-16481 — Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool (CVSS 7.5)
CVE-2026-15829 — SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox (CVSS 8.1)
CVE-2026-11720 — Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder (CVSS 9.1)
CVE-2026-11719 — (CVSS 8.1)
CVE-2026-11718 — (CVSS 9.1)
CVE-2026-11717 — (CVSS 9.1)
CVE-2026-11624 — (CVSS 9.4)
CVE-2026-9739 — (CVSS 9.4)