Vulnerability in Google Mcp Toolbox For Databases
CVE-2026-11624
The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host…
EPSS: 0.002 (4.9th percentile) — read the EPSS interpretation.
Affected products
- Google Mcp Toolbox For Databases — versions 0