Go/github.com/googleapis/mcp-toolbox CVE-2026-11624: critical 9.4, EPSS 0.22%

MCP Toolbox for Databases has an Origin Validation Error

Action: Upgrade github.com/googleapis/mcp-toolbox to 0.25.0 or later.

go get github.com/googleapis/mcp-toolbox@v0.25.0

Affected

Fixed versions

Sources

• osv: GHSA-76g7-m3xw-x9gr
• nvd: CVE-2026-11624
• https://github.com/googleapis/mcp-toolbox/issues/3113
• https://github.com/googleapis/mcp-toolbox/pull/2254
• https://github.com/googleapis/mcp-toolbox/commit/17b41f64531b8fe417c28ada45d1992ba430dc1b
• https://github.com/googleapis/mcp-toolbox

CVE-2026-11624 · published 2026-06-13T12:31:25Z · modified 2026-09-10T03:50:48.612279592Z · JSON