Vulnerability in Google Mcp Toolbox For Databases

CVE-2026-9739

Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to align with MCP security guidelines. However, the hardcoded `Access-Control-Allow-…

EPSS: 0.000 (6.9th percentile) — read the EPSS interpretation.