PatchTheCVECVE-2026-14537: Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0
46
This month
CRITICAL 9.8REMOTEDOWNGRADE
CVE-2026-14537 is a critical-severity flaw (CVSS 9.8) affecting mcp toolbox for databases. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tools protected by the scopeRequired feature via sending tool invocation requests through legacy HTTP endpoints when the --enable-api flag is active.
Why this priority
- Critical severity
- CISA SSVC: automatable with total technical impact
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 84%) |
| CISA exploited list | No |
| Weakness | CWE-863 |
| Published | 2026-07-31 |
| Last modified | 2026-10-23 |
Publisher (CNA): Google Inc. · Vendor: google
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
google mcp toolbox for databases DOWNGRADE
Affected: 1.3.0 · 1.4.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.3.0
1. Check installed version
apt-cache policy mcp-toolbox-for-databases || rpm -q mcp-toolbox-for-databases || mcp-toolbox-for-databases --version
2. No fixed release: DOWNGRADE to a release before 1.3.0 (Debian / Ubuntu)
apt-cache madison mcp-toolbox-for-databases
sudo apt install mcp-toolbox-for-databases=<VERSION_BEFORE_1.3.0>
sudo apt-mark hold mcp-toolbox-for-databases
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list mcp-toolbox-for-databases
sudo dnf downgrade mcp-toolbox-for-databases-<VERSION_BEFORE_1.3.0>
sudo dnf versionlock add mcp-toolbox-for-databases
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Exact fixes by distribution
A distro patch exists: prefer upgrading over downgrading.
Fedora 46 · kwin-zones · FIXED · 1.0.13-1.fc46 · FEDORA-2026-95888f332b · source
sudo dnf upgrade --advisory=FEDORA-2026-95888f332b
Fedora ELN · nginx-mod-brotli · FIXED · 1.0.0~rc-16.eln159 · FEDORA-2026-501a6a8273 · source
sudo dnf upgrade --advisory=FEDORA-2026-501a6a8273
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Related CVEs
- CVE-2026-14539 HIGH 7.5 UPGRADE An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox ve
- CVE-2026-14541 HIGH 7.5 DOWNGRADE An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of
- CVE-2026-14538 HIGH 7.7 UPGRADE An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool componen
- CVE-2026-14540 MEDIUM 6.1 UPGRADE A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Go