Google mcp-toolbox vulnerabilities
5 published CVEs name Google mcp-toolbox among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-14541
Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider
Google · mcp-toolbox
High8.0 - CVE-2026-14540
Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox
Google · mcp-toolbox
High8.0 - CVE-2026-14539
Denial of Service via Unrestricted Payload Buffering in MCP Toolbox
Google · mcp-toolbox
Medium6.6 - CVE-2026-14538
BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox
Google · mcp-toolbox
Medium5.7 - CVE-2026-14537
Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints
Google · mcp-toolbox
High8.1