MC
Product
mcp-toolbox
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add mcp-toolbox to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14537 | 9.8 | Jul 31 | Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints Affected: 1.3.0; v1.4.0 |
| CVE-2026-14538 | 7.7 | Jul 31 | BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox Affected: 0.16.1 through 1.4.0 |
| CVE-2026-14541 | 7.5 | Jul 31 | Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider Affected: 1.4.0 |
| CVE-2026-14539 | 7.5 | Jul 31 | Denial of Service via Unrestricted Payload Buffering in MCP Toolbox Affected: 0.0.0 through 1.4.0 |
| CVE-2026-14540 | 6.1 | Jul 31 | Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox Affected: 0.3.0 through 1.4.0 |
Showing 5