Login Request a demo
MT
Product
MCP Toolbox for Databases
by Google · last CVE Sep 29, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 6High 7Medium 1Low 0
Severity
All severities14Critical6High7Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MCP Toolbox for Databases to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102242
8.6
0%
Sep 29
Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases
Affected: 1.2.0 through 1.9.0
CVE-2026-15829
8.1
0%
Jul 21
SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox
Affected: 0.13.0 through 1.3.0
CVE-2026-11719
8.1
0%
Jun 18
An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers
Affected: 1.3.0
CVE-2026-14538
7.7
0%
Jul 31
BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox
Affected: 0.16.1 through 1.4.0
CVE-2026-14541
7.5
0%
Jul 31
Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider
Affected: 1.4.0
CVE-2026-14539
7.5
0%
Jul 31
Denial of Service via Unrestricted Payload Buffering in MCP Toolbox
Affected: before 1.5.0
CVE-2026-16481
7.5
0%
Jul 27
Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool
Affected: 0.19.1 before 1.5.0
Showing 7