Skip to content

Product

Google mcp-toolbox-sdk-python vulnerabilities

1 published CVE affecting Google mcp-toolbox-sdk-python, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Google mcp-toolbox-sdk-python CVEs

Newest publication first

  1. CVE-2026-19202 Token Cache Reuse in mcp-toolbox-sdk-python

    Published
    CriticalCVSS 9.1

    A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application uses the SDK to authenticate to two or more different audiences within the same process, the module-l...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.