How severe is CVE-2026-14540?

CVE-2026-14540 has a CVSS 3.x base score of 6.1, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.

Is CVE-2026-14540 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (2nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-14540?

CVE-2026-14540 affects Google Mcp Toolbox For Databases. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-14540?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2026-14540 published?

CVE-2026-14540 was published on 2026-07-31 and last updated on 2026-08-08.

CVE-2026-14540

CVE-2026-14540 is a medium-severity vulnerability in Google Mcp Toolbox For Databases with a CVSS 3.x base score of 6.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-918.

Key facts

Severity: Medium (CVSS 3.x base score 6.1)
CVSS v4: 8.0
EPSS exploit prediction: 0% (2nd percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-918
Affected product: Google Mcp Toolbox For Databases
Published: 2026-07-31
Last modified: 2026-08-08

Description

A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client (internal/sources/http/http.go) fails to safely regulate request redirection boundaries. Specifically, the client is initialized without a restrictive CheckRedirect policy hook and lacks target IP validation. An attacker or a malicious data-driven prompt can supply a crafted path parameter that triggers an open redirect or a direct destination swap on the target backend, coercing the mcp-toolbox into blindly following the redirection and making unauthorized requests to internal or arbitrary external endpoints.

Frequently asked questions

What is CVE-2026-14540?: A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client (internal/sources/http/http.go) fails to safely regulate request redirection boundaries. Specifically, the client is initialized without a restrictive CheckRedirect policy hook and lacks target IP validation. An attacker or a malicious data-driven prompt can supply a crafted path parameter that triggers an open redirect or a direct destination swap on the target backend, coercing the mcp-toolbox into blindly following the redirection and making unauthorized requests to internal or arbitrary external endpoints.
How severe is CVE-2026-14540?: CVE-2026-14540 has a CVSS 3.x base score of 6.1, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.
Is CVE-2026-14540 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (2nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-14540?: CVE-2026-14540 affects Google Mcp Toolbox For Databases. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-14540?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2026-14540 published?: CVE-2026-14540 was published on 2026-07-31 and last updated on 2026-08-08.

References

https://github.com/googleapis/mcp-toolbox/pull/3448

Affected products (1)

cpe:2.3:a:google:mcp_toolbox_for_databases:*:*:*:*:*:*:*:*

More vulnerabilities in Google Mcp Toolbox For Databases

CVE-2026-14537 — Critical (CVSS 9.8): Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and…
CVE-2026-11720 — Critical (CVSS 9.1): A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing…
CVE-2026-11718 — Critical (CVSS 9.1): An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of…
CVE-2026-11717 — Critical (CVSS 9.1): An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of…
CVE-2026-11719 — High (CVSS 8.1): An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope…
CVE-2026-14538 — High (CVSS 7.7): An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of…

All CVEs affecting Google Mcp Toolbox For Databases →

Other CWE-918 (Server-Side Request Forgery (SSRF)) vulnerabilities

CVE-2026-69502 — Critical (CVSS 10.0): Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a…
CVE-2026-65801 — Critical (CVSS 10.0): Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges…
CVE-2026-48331 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in…
CVE-2026-54735 — Critical (CVSS 10.0): Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version…
CVE-2026-57106 — Critical (CVSS 10.0): Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-15409 — Critical (CVSS 10.0): A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A…

Browse all CWE-918 (Server-Side Request Forgery (SSRF)) vulnerabilities →