MT
Product
MCP Toolbox for Databases
14
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 7Medium 1Low 0
Watch
Add MCP Toolbox for Databases to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14537 | 9.8 | Jul 31 | Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints Affected: 1.3.0; 1.4.0 |
| CVE-2026-11624 | 9.4 | Jun 13 | The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks Affected: before 0.25.0 |
| CVE-2026-9739 | 9.4 | May 27 | Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790) Affected: before PR 3054 (Fix CORS bypass) |
| CVE-2026-11720 | 9.1 | Jun 29 | Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder Affected: before 1.3.0 |
| CVE-2026-11718 | 9.1 | Jun 18 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox Affected: 1.0.0 through 1.3.0 |
| CVE-2026-11717 | 9.1 | Jun 18 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox Affected: 1.0.0 through 1.3.0 |
Showing 6