Google mcp-toolbox vulnerabilities
5 published CVEs name Google mcp-toolbox among the affected products.
- Published CVEs
- 5
- Last 12 months
- 5
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 2Low 0Not scored 0
Newest CVEs
- CVE-2026-14541
Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider
Google · mcp-toolbox
High8.0 - CVE-2026-14540
Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox
Google · mcp-toolbox
High8.0 - CVE-2026-14539
Denial of Service via Unrestricted Payload Buffering in MCP Toolbox
Google · mcp-toolbox
Medium6.6 - CVE-2026-14538
BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox
Google · mcp-toolbox
Medium5.7 - CVE-2026-14537
Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints
Google · mcp-toolbox
High8.1