High · 8.1 CVE-2026-14537 EUVD-2026-51371GHSA-f8h2-c55w-8m5p

Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints

Published Jul 31, 2026 · Updated Jul 31, 2026 · Assigned by Google

Description

Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tools protected by the scopeRequired feature via sending tool invocation requests through legacy HTTP endpoints when the --enable-api flag is active.

Affected products

Vendor	Product	Affected	Fixed
Google	mcp-toolbox	1.3.0, v1.4.0	—

References

https://github.com/googleapis/mcp-toolbox/pull/3435