Skip to content
OpenAdvisories

Product · Google

mcp-toolbox-sdk-python

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-19202

    Token Cache Reuse in mcp-toolbox-sdk-python

    A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application uses the SDK to authenticate to two or more different audiences within the same …

    Google mcp-toolbox-sdk-python