{"id":"EUVD-2026-37879","enisaUuid":"69203c35-bbd7-382d-bb34-49977eb8e969","description":"An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.\n\nWhen verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), the toolbox decodes the response into an introspectResp struct where the Active field is declared as a pointer to a boolean (*bool). The code only explicitly rejects a token if the response contains a populated active field set to false (if introspectResp.Active !\u003d nil \u0026\u0026 !*introspectResp.Active). If an introspection endpoint responds with a payload that completely omits the mandatory active key, the internal variable remains nil, causing the conditional check to short-circuit. As a result, Toolbox accepts authorization tokens missing the \"active\" field, granting access to protected tools and underlying data sources.","datePublished":"Jun 18, 2026, 11:50:23 AM","dateUpdated":"Jun 18, 2026, 12:23:15 PM","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/googleapis/mcp-toolbox/pull/3341\n","aliases":"CVE-2026-11717\nGHSA-8fcc-w5hv-4gxv\n","assigner":"Google","epss":0.18,"enisaIdProduct":[{"id":"abea81b5-b931-310b-92df-ff42e4558e4a","product":{"name":"MCP Toolbox for Databases (googleapis/mcp-toolbox)","vendor":{"name":"Google"}},"product_version":"1.0.0 ≤1.3.0"}],"enisaIdVendor":[{"id":"948d00b4-a639-3c98-8271-e7c69a5f4a8d","vendor":{"name":"Google"}}],"enisaIdVulnerability":[{"id":"c27e1667-dcfb-34ce-97f6-e80f0508c126","vulnerability":{"id":"GHSA-8fcc-w5hv-4gxv","description":"googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)","datePublished":"Jun 18, 2026, 3:32:01 PM","dateUpdated":"Jun 19, 2026, 4:58:21 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-11717\nhttps://github.com/googleapis/mcp-toolbox/pull/3341\nhttps://github.com/googleapis/mcp-toolbox\n","enisa_id":"EUVD-2026-37879\n","aliases":"GHSA-8fcc-w5hv-4gxv\nCVE-2026-11717\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c7260598-d897-364e-9599-52d31710f76c","vulnerability":{"id":"CVE-2026-11717","description":"An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.\n\nWhen verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), the toolbox decodes the response into an introspectResp struct where the Active field is declared as a pointer to a boolean (*bool). The code only explicitly rejects a token if the response contains a populated active field set to false (if introspectResp.Active !\u003d nil \u0026\u0026 !*introspectResp.Active). If an introspection endpoint responds with a payload that completely omits the mandatory active key, the internal variable remains nil, causing the conditional check to short-circuit. As a result, Toolbox accepts authorization tokens missing the \"active\" field, granting access to protected tools and underlying data sources.","datePublished":"Jun 18, 2026, 11:50:23 AM","dateUpdated":"Jun 18, 2026, 12:23:15 PM","status":"PUBLISHED","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/googleapis/mcp-toolbox/pull/3341\n","enisa_id":"EUVD-2026-37879\n","assigner":"Google","epss":0.18,"dataProcessed":"Nov 4, 2026, 7:12:18 AM","vulnerabilityProduct":[{"id":"2f03c8d9-3492-3463-b1af-ab2a56901657","product":{"name":"MCP Toolbox for Databases (googleapis/mcp-toolbox)","vendor":{"name":"Google"}},"product_version":"1.0.0 ≤1.3.0"}],"vulnerabilityVendor":[{"id":"8891ef8c-3c66-3d1c-8207-397bd9abfa9a","vendor":{"name":"Google"}}]}}],"enisaIdAdvisory":[]}