Vulnerability Details CVE-2026-14539
An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4.0 allows an unauthenticated attacker to cause a denial of service (DoS). The /mcp endpoint handler reads incoming payloads directly into system memory using an unrestricted buffer loop (io.ReadAll) without applying defensive constraints such as http.MaxBytesReader or pre-read Content-Length enforcement. By submitting a single, massive HTTP request body, an attacker can linearly consume available host memory until the runtime process is terminated by an Out-Of-Memory (OOM) error.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 11.3%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-14539
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.0.1
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.0.2
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.0.3
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.0.4
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.0.5
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.1.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.10.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.11.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.12.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.13.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.14.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.15.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.16.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.17.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.18.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.19.1
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.2.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.2.1
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.20.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.21.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.22.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.23.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.24.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.25.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.26.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.27.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.28.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.29.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.3.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.30.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.31.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.32.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.4.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.5.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.6.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.7.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.8.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.9.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.0.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.1.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.2.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.3.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.4.0