CVE-2026-14541: falha de alta gravidade em Google mcp-toolbox
Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8epss 0.3%
An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for opaque tokens skips audience validation entirely. As a result, the toolbox will accept any valid Google OAuth access token—even those minted for unrelated ecosystem applications—granting unauthorized clients access to protected tools and data backends.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
Produtos afetados
Google · mcp-toolboxCVEs relacionadas — Google mcp-toolbox
No mesmo produto, das mais perigosas para as menos.
CVE-2026-14537HIGHAuthorization Bypass in MCP Toolbox Legacy HTTP EndpointsEPSS 0.3%CVE-2026-14539MEDIUMDenial of Service via Unrestricted Payload Buffering in MCP ToolboxEPSS 0.2%CVE-2026-14538MEDIUMBigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP ToolboxEPSS 0.2%CVE-2026-14540HIGHServer-Side Request Forgery via Unrestricted HTTP Redirection in MCP ToolboxEPSS 0.1%