Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-11720— Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder

Quick assessment

Affected
Google MCP Toolbox for Databases (googleapis/mcp-toolbox)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Google MCP Toolbox for Databases (googleapis/mcp-toolbox)是美国Google公司的一个数据库管理工具箱。 Google MCP Toolbox for Databases 1.3.0之前版本存在路径遍历漏洞，该漏洞源于HTTP工具URL构建器中的路径遍历问题，URL构建器依赖ResolveReference进行最终URL解析，由于点片段(../)在此解析步骤中被规范化，攻击者可提供包含目录遍历序列的路径参数绕过操作员配置的路径范围，导致客户端强制工具

AI Predicted 7.5 Difficulty: Easy EPSS 0.53% · P44

Affected Version Matrix 1

VendorProduct Version RangeStatus
Google MCP Toolbox for Databases (googleapis/mcp-toolbox) < 1.3.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-11720

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder
Source: CVE Program / CVE List V5
Vulnerability Description
A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the input does not alter the scheme, host, or user info, it relies on ResolveReference for the final URL resolution. Because dot segments (../) are normalized during this resolution step, an attacker can supply path parameters containing directory traversal sequences to escape the operator-configured path scope. This allows the client to coerce the toolbox into making requests to unintended endpoints on the same target host while forwarding the toolbox's configured credentials (e.g., bypassing a restricted path like /api/v1/users/{{.id}} to reach /admin/secrets).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Google MCP Toolbox for Databases 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google MCP Toolbox for Databases (googleapis/mcp-toolbox)是美国Google公司的一个数据库管理工具箱。 Google MCP Toolbox for Databases 1.3.0之前版本存在路径遍历漏洞，该漏洞源于HTTP工具URL构建器中的路径遍历问题，URL构建器依赖ResolveReference进行最终URL解析，由于点片段(../)在此解析步骤中被规范化，攻击者可提供包含目录遍历序列的路径参数绕过操作员配置的路径范围，导致客户端强制工具
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Google MCP Toolbox for Databases (googleapis/mcp-toolbox) 0 ~ 1.3.0 -

II. Public POCs for CVE-2026-11720

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-11720

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-11720 (1)

IV. Related Vulnerabilities

Same product: MCP Toolbox for Databases (googleapis/mcp-toolbox)
Same vendor: Google
Same weakness: CWE-22

V. Comments for CVE-2026-11720

No comments yet

Leave a comment