# github.com/googleapis/mcp-toolbox (Go) vulnerabilities

6 known vulnerabilities (5 critical, 1 high), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: v1.16.0 (Nov 5, 2026): no advisory affects it
- Newest unaffected release: v1.16.0 (Nov 5, 2026), the latest release
- Releases: 19 since v0.32.0 (Apr 8, 2026)
- Registry: https://pkg.go.dev/github.com/googleapis/mcp-toolbox
- Releases read: Nov 8, 2026

## Version timeline

Affected versions per advisory, in version order:

- CVE-2026-11720: v0.32.0 to v1.2.0 (v1.3.0 is outside it)
- CVE-2026-11719: v0.32.0 to v1.3.0 (v1.4.0 is outside it)
- CVE-2026-11718: v0.32.0 to v1.3.0 (v1.4.0 is outside it)
- CVE-2026-11717: v0.32.0 to v1.3.0 (v1.4.0 is outside it)
- CVE-2026-11624: no published release is affected
- CVE-2026-9739: v0.32.0 to v1.1.0 (v1.2.0 is outside it)

## Advisories (6)

### [CVE-2026-11720](https://cve.now/CVE-2026-11720): Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder

- Severity: Critical 9.3
- Published: Jun 29, 2026
- Affected: fixed in 1.3.0.
- Fixed in v1.3.0 (released May 21, 2026, 39 days before disclosure).
- The latest release, v1.16.0, is not affected.

### [CVE-2026-11719](https://cve.now/CVE-2026-11719): An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older…

- Severity: High 8.6
- Published: Jun 18, 2026
- Affected: fixed in 1.4.0.
- Fixed in v1.4.0 (released Jun 4, 2026, 14 days before disclosure).
- The latest release, v1.16.0, is not affected.

### [CVE-2026-11718](https://cve.now/CVE-2026-11718): An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.

- Severity: Critical 9.3
- Published: Jun 18, 2026
- Affected: fixed in 1.4.0.
- Fixed in v1.4.0 (released Jun 4, 2026, 14 days before disclosure).
- The latest release, v1.16.0, is not affected.

### [CVE-2026-11717](https://cve.now/CVE-2026-11717): An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.

- Severity: Critical 9.3
- Published: Jun 18, 2026
- Affected: fixed in 1.4.0.
- Fixed in v1.4.0 (released Jun 4, 2026, 14 days before disclosure).
- The latest release, v1.16.0, is not affected.

### [CVE-2026-11624](https://cve.now/CVE-2026-11624): The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent…

- Severity: Critical 9.4
- Published: Jun 13, 2026
- Affected: fixed in 0.25.0.
- Fixed in v0.32.0 (released Apr 8, 2026, 66 days before disclosure, the advisory names 0.25.0, which was never published).
- The latest release, v1.16.0, is not affected.

### [CVE-2026-9739](https://cve.now/CVE-2026-9739): Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790).

- Severity: Critical 9.4
- Published: May 27, 2026
- Affected: fixed in 1.2.0.
- Fixed in v1.2.0 (released May 7, 2026, 20 days before disclosure).
- The latest release, v1.16.0, is not affected.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/go/github.com/googleapis/mcp-toolbox
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.