CVE-2026-11720Disclosure(google / mcp_toolbox_for_databases)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the input does not alter the scheme, host, or user info, it relies on ResolveReference for the final URL resolution. Because dot segments (../) are normalized during this resolution step, an attacker can supply path parameters containing directory traversal sequences to escape the operator-configured path scope. This allows the client to coerce the toolbox into making requests to unintended endpoints on the same target host while forwarding the toolbox's configured credentials (e.g., bypassing a restricted path like /api/v1/users/{{.id}} to reach /admin/secrets).

google CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/googleapis/mcp-toolbox/pull/3218

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mcp_toolbox_for_databases

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-06-29); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

google

Products

mcp_toolbox_for_databases

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-29	2	Disclosure2
2026-07-05	1	Disclosure1

Full discourse3 posts

ゆぅさん@YY2042427786d
Disclosure
【3軸解説】「GoogleのMCP Toolbox for Databasesにおけるパストラバーサルの脆弱性（CVE-2026-11720）」を、背景 / 目的 / 効果の 3 軸で読み解きます。背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post offers a concise, three‑axis analysis of CVE‑2026‑11720, a path traversal flaw in Google MCP Toolbox for Databases, and directs readers to a free analytical tool. No PoC, exploit details, or patch information are provided.
0000075
845 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-11720 A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes … https://www.cve.org/CVERecord?id=CVE-2026-11720 ----- Traducción: CVE-2026-11720 Exi… http://infoflow.cloud`
Post summary
A path traversal vulnerability (CVE-2026-11720) in googleapis/mcp-toolbox’s HTTP tool URL builder is announced with a reference to the CVE record, but no PoC, exploit, or patch details are included.
0000036
89 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-11720 A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes … https://www.cve.org/CVERecord?id=CVE-2026-11720
Post summary
A path traversal vulnerability has been revealed in googleapis/mcp-toolbox’s HTTP URL builder, potentially allowing malicious manipulation of downstream API requests.
00000610
57.7K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	google	mcp_toolbox_for_databases	-	-	-

Explore more

Back to dashboard google CVEs mcp_toolbox_for_databases vulnerabilities