SSRF in Google Mcp Toolbox For Databases (Googleapis/mcp-toolbox)
CVE-2026-16481
A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of googleapis/mcp-toolbox. The tool takes an unvalidated pageURL parameter from the client and issues an HT…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Google Mcp Toolbox For Databases (Googleapis/mcp-toolbox) — versions 0.19.1