Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated… (CVE-2026-14537)
Google mcp-toolbox versions v1.3.0 and v1.4.0 contain an incorrect authorization vulnerability in the direct HTTP API tool invocation endpoint. This flaw allows an unauthenticated attacker to invoke tools that should be protected by the scopeRequired feature by sending requests through legacy HTTP endpoints when the --enable-api flag is enabled. The vulnerability has a high severity with a CVSS score of 9.8, indicating critical impact on confidentiality, integrity, and availability.
AI Analysis
Technical Summary
CVE-2026-14537 is an authorization bypass vulnerability in Google mcp-toolbox versions v1.3.0 and v1.4.0. The issue arises because the direct HTTP API tool invocation endpoint does not properly enforce authorization checks when the --enable-api flag is active. Attackers can exploit this by sending tool invocation requests through legacy HTTP endpoints, bypassing the scopeRequired protection and invoking tools without authentication. This vulnerability is classified under CWE-863 (Incorrect Authorization).
Potential Impact
Successful exploitation allows unauthenticated attackers to invoke protected tools, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The CVSS score of 9.8 reflects the critical nature of this vulnerability, with network attack vector, no required privileges or user interaction, and high impact on all security properties.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to disable the --enable-api flag or restrict access to the legacy HTTP endpoints to trusted users only to prevent unauthorized tool invocation.
Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated… (CVE-2026-14537)
Description
Google mcp-toolbox versions v1.3.0 and v1.4.0 contain an incorrect authorization vulnerability in the direct HTTP API tool invocation endpoint. This flaw allows an unauthenticated attacker to invoke tools that should be protected by the scopeRequired feature by sending requests through legacy HTTP endpoints when the --enable-api flag is enabled. The vulnerability has a high severity with a CVSS score of 9.8, indicating critical impact on confidentiality, integrity, and availability.
CVSS v3.1
Score 9.8critical
Affected software
pkg:github/googleapis/mcp-toolboxRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-14537 is an authorization bypass vulnerability in Google mcp-toolbox versions v1.3.0 and v1.4.0. The issue arises because the direct HTTP API tool invocation endpoint does not properly enforce authorization checks when the --enable-api flag is active. Attackers can exploit this by sending tool invocation requests through legacy HTTP endpoints, bypassing the scopeRequired protection and invoking tools without authentication. This vulnerability is classified under CWE-863 (Incorrect Authorization).
Potential Impact
Successful exploitation allows unauthenticated attackers to invoke protected tools, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The CVSS score of 9.8 reflects the critical nature of this vulnerability, with network attack vector, no required privileges or user interaction, and high impact on all security properties.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to disable the --enable-api flag or restrict access to the legacy HTTP endpoints to trusted users only to prevent unauthorized tool invocation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-f8h2-c55w-8m5p
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-14537"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a77428ebf8831d539b07145
Added to database: 08/08/2026, 14:51:58 UTC
Last enriched: 08/08/2026, 15:06:51 UTC
Last updated: 08/09/2026, 00:41:12 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.