CVE-2026-11720
Published Jun 29, 2026A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controll…
- evidence mentions
- 1
- Buzz score
- 11.9