Google Mcp Toolbox For Databases
3 CVEs affecting Google Mcp Toolbox For Databases. Latest disclosed: 2026-09-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-102242 | | 2026-09-29 | Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a r… | |
CVE-2026-11624 | | 2026-06-13 | The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks… | |
CVE-2026-9739 | | 2026-05-27 | Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to a… |