MT
Product
MCP Toolbox for Databases
14
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 7Medium 1Low 0
Watch
Add MCP Toolbox for Databases to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14537 | 9.8 | Jul 31 | Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints Affected: 1.3.0; 1.4.0 |
| CVE-2026-11624 | 9.4 | Jun 13 | The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks Affected: before 0.25.0 |
| CVE-2026-9739 | 9.4 | May 27 | Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790) Affected: before PR 3054 (Fix CORS bypass) |
| CVE-2026-11720 | 9.1 | Jun 29 | Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder Affected: before 1.3.0 |
| CVE-2026-11718 | 9.1 | Jun 18 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox Affected: 1.0.0 through 1.3.0 |
| CVE-2026-11717 | 9.1 | Jun 18 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox Affected: 1.0.0 through 1.3.0 |
| CVE-2026-102242 | 8.6 | Sep 29 | Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases Affected: 1.2.0 through 1.9.0 |
| CVE-2026-15829 | 8.1 | Jul 21 | SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox Affected: 0.13.0 through 1.3.0 |
| CVE-2026-11719 | 8.1 | Jun 18 | An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers Affected: 1.3.0 |
| CVE-2026-14538 | 7.7 | Jul 31 | BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox Affected: 0.16.1 through 1.4.0 |
| CVE-2026-14541 | 7.5 | Jul 31 | Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider Affected: 1.4.0 |
| CVE-2026-14539 | 7.5 | Jul 31 | Denial of Service via Unrestricted Payload Buffering in MCP Toolbox Affected: before 1.5.0 |
| CVE-2026-16481 | 7.5 | Jul 27 | Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool Affected: 0.19.1 before 1.5.0 |
| CVE-2026-14540 | 6.1 | Jul 31 | Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox Affected: 0.3.0 before 1.5.0 |
Showing 14