Skip to contentGoogle Mcp Toolbox For Databases vulnerabilities
- google mcp toolbox for databases (googleapis/mcp-toolbox)Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and WriteCVE-2026-93328Public exploit9.3 Critical
- google mcp toolbox for databasesPath Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for DatabasesCVE-2026-1022428.6 High
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 moreServer-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page ToolCVE-2026-164816.0 Medium
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 moreSQL Injection and Security Boundary Bypass in googleapis/mcp-toolboxCVE-2026-158298.6 High
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 morePath Traversal in googleapis/mcp-toolbox HTTP Tool URL BuilderCVE-2026-11720Fix available9.3 Critical
- google mcp toolbox for databases, mcp toolbox for databases (googleapis/mcp-toolbox) +1 moreMCP Toolbox for Databases: authenticated authorization bypassCVE-2026-11719Fix available8.6 High
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 moregoogleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)CVE-2026-11718Fix available9.3 Critical
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 moregoogleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)CVE-2026-11717Fix available9.3 Critical
- google mcp toolbox for databasesMCP Toolbox for Databases has an Origin Validation ErrorCVE-2026-11624Fix available9.4 Critical
- google mcp toolbox for databasesMCP Toolbox for Databases vulnerable to DNS rebinding attacksCVE-2026-9739Fix available9.4 Critical