Product · Google

MCP Toolbox for Databases

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.4

CVE-2026-11624

MCP Toolbox for Databases has an Origin Validation Error

The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. In v0.25.0, a new "-…

Google MCP Toolbox for Databases github.com/googleapis/mcp-toolbox github.com/googleapis/genai-toolbox Go

Jun 13, 2026
Critical 9.4

CVE-2026-9739

MCP Toolbox for Databases vulnerable to DNS rebinding attacks

Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to align with MCP security guidelines. However, the hardcoded `Access-Control-Allow-Origin: *` header in…

Google MCP Toolbox for Databases github.com/googleapis/mcp-toolbox Go

May 27, 2026