All 6 CVE vulnerabilities found in MCP Toolbox for Databases (googleapis/mcp-toolbox), with AI-generated Chinese analysis, references, and POCs.
Vendor: Google
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-16481 | Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool CWE-918 | 6.0 | Medium | 2026-07-27 |
| CVE-2026-15829 | SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox CWE-89 | - | - | 2026-07-21 |
| CVE-2026-11720 | Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder CWE-22 | - | - | 2026-06-29 |
| CVE-2026-11719 | Google MCP Toolbox for Databases (googleapis/mcp-toolbox) 授权问题漏洞 CWE-862 | - | - | 2026-06-18 |
| CVE-2026-11718 | Google MCP Toolbox for Databases (googleapis/mcp-toolbox) 授权问题漏洞 CWE-287 | - | - | 2026-06-18 |
| CVE-2026-11717 | Google MCP Toolbox for Databases (googleapis/mcp-toolbox) 授权问题漏洞 CWE-287 | - | - | 2026-06-18 |
All 6 known CVE vulnerabilities affecting MCP Toolbox for Databases (googleapis/mcp-toolbox) with full Chinese analysis, references, and POCs where available.