MCP Toolbox for Databases (googleapis/mcp-toolbox) vulnerabilities

6 known vulnerabilities in MCP Toolbox for Databases (googleapis/mcp-toolbox) from Google. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MCP Toolbox for Databases (googleapis/mcp-toolb…: Server-Side Request Forgery

  CVE-2026-16481Jul 27, 2026Google

  A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of googleapis/mcp-toolbox. The tool takes an unvalidated pageURL parameter from the client and issues an HTTP GET request to it u

• 8.1 High severity

  MCP Toolbox for Databases (googleapis/mcp-toolb…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-15829Jul 21, 2026Google

  A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of googleapis/mcp-toolbox. The tool accepts client-controlled parameters (data_col, timestamp_col, and id_cols) a

• 9.1 Critical severity

  MCP Toolbox for Databases (googleapis/mcp-toolb…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-11720Jun 29, 2026Google

  A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a r

• 8.1 High severity

  MCP Toolbox for Databases (googleapis/mcp-toolb…: Missing Authorization

  CVE-2026-11719Jun 18, 2026Google

  An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers. While the 2025-11-25 protocol version handler correctly enforces per-tool restrictions defined by scopesReq

• 9.1 Critical severity

  MCP Toolbox for Databases (googleapis/mcp-toolb…: Improper Authentication

  CVE-2026-11718Jun 18, 2026Google

  An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When the toolbox validates an opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), it decodes the response in

• 9.1 Critical severity

  MCP Toolbox for Databases (googleapis/mcp-toolb…: Improper Authentication

  CVE-2026-11717Jun 18, 2026Google

  An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), the toolbox decodes the respo