Mcp Toolbox For Databases Googleapismcp-toolbox (Google) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-27. Vendor: Google.

CVEs of Mcp Toolbox For Databases Googleapismcp-toolbox

• CVE-2026-16481 - CVSS 7.5 (high), 2026-07-27: A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of googleapis/mcp-toolbox.…
• CVE-2026-15829 - CVSS 8.6 (high), 2026-07-21: A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of…
• CVE-2026-11720 - CVSS 9.3 (critical), 2026-06-29: A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder…
• CVE-2026-11719 - CVSS 8.6 (high), 2026-06-18: An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers. While…
• CVE-2026-11718 - CVSS 9.3 (critical), 2026-06-18: An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When the toolbox…
• CVE-2026-11717 - CVSS 9.3 (critical), 2026-06-18: An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When verifying an…