CVE-2026-14537

概要

参考情報

• googleapis/mcp-toolbox#3435 · Issue Tracking

mcp toolbox for databases のその他の脆弱性

• CVE-2026-14541高 7.5An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.…
• CVE-2026-14540中 6.1A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.…
• CVE-2026-14539高 7.5An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4…
• CVE-2026-14538高 7.7An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versio…
• CVE-2026-16481高 7.5A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of google…