MT
Product
MCP Toolbox for Databases (googleapis/mcp-toolbox)
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 0Low 0
Watch
Add MCP Toolbox for Databases (googleapis/mcp-toolbox) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-11720 | 9.1 | Jun 29 | Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder Affected: before 1.3.0 |
| CVE-2026-11718 | 9.1 | Jun 18 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox Affected: 1.0.0 through 1.3.0 |
| CVE-2026-11717 | 9.1 | Jun 18 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox Affected: 1.0.0 through 1.3.0 |
| CVE-2026-15829 | 8.1 | Jul 21 | SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox Affected: 0.13.0 through 1.3.0 |
| CVE-2026-11719 | 8.1 | Jun 18 | An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers Affected: 1.3.0 |
| CVE-2026-16481 | 7.5 | Jul 27 | Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool Affected: 0.19.1 through 1.4.0 |
Showing 6