google / mcp_toolbox_for_databases
8 known vulnerabilities in google mcp_toolbox_for_databases.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-14541 | Medium | 0.2% | 7.5 | An authentication bypass and audience confusion vulnerability exists in the Goog… | |
| CVE-2026-14537 | Medium | 0.2% | 9.8 | Incorrect Authorization in the direct HTTP API tool invocation endpoint in Googl… | |
| CVE-2026-14539 | Medium | 0.2% | 7.5 | An allocation of resources without limits vulnerability in the HTTP handler comp… | |
| CVE-2026-14538 | Medium | 0.2% | 7.7 | An improper authorization and security-boundary bypass vulnerability in the bigq… | |
| CVE-2026-11718 | Medium | 0.2% | 9.1 | An authentication bypass vulnerability exists in the generic opaque token valida… | |
| CVE-2026-11717 | Medium | 0.2% | 9.1 | An authentication bypass vulnerability exists in the generic opaque token valida… | |
| CVE-2026-11719 | Medium | 0.1% | 8.1 | An authenticated authorization bypass vulnerability exists in MCP Toolbox for Da… | |
| CVE-2026-14540 | Low | 0.1% | 6.1 | A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP so… |