EXPOSURES › CVE-2026-14537

CVE-2026-14537

CRITICAL

DETAIL

SourceNVD · cve Published2026-07-31 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-14537 ↗

⚡ RCE SHAME 78/100 unpatchedexploited-in-wildrceauth-bypass

An unauthenticated attacker can invoke protected tools via legacy HTTP endpoints in Google's mcp-toolbox v1.3.0 and v1.4.0 when the --enable-api flag is active.

This authorization bypass allows remote code execution through tool invocation, directly impacting DIB compliance by enabling unauthenticated access to protected scopes. Organizations must patch immediately and disable the --enable-api flag to prevent exploitation.

Shame score — A critical authorization flaw allowing unauthenticated tool invocation demonstrates severe negligence in access control design and exposes systems to arbitrary code execution.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

Google · vendor mcp toolbox for databases · product

DESCRIPTION

Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tools protected by the scopeRequired feature via sending tool invocation requests through legacy HTTP endpoints when the --enable-api flag is active.

AFFECTED FEDRAMP PRODUCTS · 2

PRODUCT	PROVIDER	STATUS	MATCH
Google Services (Google Cloud Platform Products and underlying Infrastructure) Google	Google	Authorized	vendor-exact · 0.90
Google Workspace Google	Google	Authorized	vendor-exact · 0.90