Vulnerability Details CVE-2026-14540
A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client (internal/sources/http/http.go) fails to safely regulate request redirection boundaries. Specifically, the client is initialized without a restrictive CheckRedirect policy hook and lacks target IP validation. An attacker or a malicious data-driven prompt can supply a crafted path parameter that triggers an open redirect or a direct destination swap on the target backend, coercing the mcp-toolbox into blindly following the redirection and making unauthorized requests to internal or arbitrary external endpoints.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.8%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2026-14540
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.10.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.11.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.12.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.13.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.14.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.15.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.16.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.17.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.18.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.19.1
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.20.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.21.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.22.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.23.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.24.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.25.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.26.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.27.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.28.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.29.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.3.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.30.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.31.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.32.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.4.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.5.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.6.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.7.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.8.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:0.9.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.0.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.1.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.2.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.3.0
-
cpe:2.3:a:google:mcp_toolbox_for_databases:1.4.0