CVE-2026-11719 Details
Description
An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers. While the 2025-11-25 protocol version handler correctly enforces per-tool restrictions defined by scopesRequired, older supported protocol versions (2025-06-18, 2025-03-26, and 2024-11-05) omit this check. An authenticated client with low-privilege tokens (e.g., read) can bypass the intended per-tool scope restrictions and execute high-privilege tools (e.g., admin) simply by specifying an older protocol version in the MCP-Protocol-Version header, or by omitting the header entirely (which causes the server to default to the vulnerable 2024-11-05 handler).
An authenticated authorization bypass vulnerability has been identified in MCP Toolbox for Databases. This issue arises from inadequate scope enforcement in older protocol handlers, allowing low-privilege clients to access high-privilege tools. The vulnerability affects several protocol versions, including 2025-06-18, 2025-03-26, and 2024-11-05, all of which lack proper per-tool restriction enforcement. Exploitation can be achieved by specifying an older protocol version in the MCP-Protocol-Version header or by omitting the header entirely, which defaults to the vulnerable 2024-11-05 handler.
Users can update to the latest version of MCP Toolbox for Databases, which includes the necessary scope validation for tool-level permissions. The updated version can be obtained from the official GitHub repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 18, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/googleapis/mcp-toolbox/pull/3049 | [email protected] | Patch |
| https://github.com/googleapis/mcp-toolbox/pull/3335 | [email protected] | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| google mcp toolbox for databases | 1.3.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 17, 2026 | Initial Analysis | [email protected] |
| Jun 18, 2026 | New CVE Received | [email protected] |
| Jun 18, 2026 | CVE Modified | CISA-ADP |