Go/github.com/googleapis/mcp-toolbox CVE-2026-11719: high 8.1, EPSS 0.14%

MCP Toolbox for Databases: authenticated authorization bypass

Action: Upgrade github.com/googleapis/mcp-toolbox to 1.4.0 or later.

go get github.com/googleapis/mcp-toolbox@v1.4.0

Affected

Fixed versions

Sources

• osv: GHSA-5gf6-gc35-xjpc
• nvd: CVE-2026-11719
• https://github.com/googleapis/mcp-toolbox/pull/3049
• https://github.com/googleapis/mcp-toolbox/pull/3335
• https://github.com/googleapis/mcp-toolbox

CVE-2026-11719 · published 2026-06-18T15:32:02Z · modified 2026-06-25T18:56:14.176527201Z · JSON