CVE-2026-14540

mentions 2 type Organization feed RSS

// recent coverage 2 mentions

07:34

2026-09-28

anas-security-portfolio.vercel.app

ai-agents

I found an SSRF in Google's official MCP Toolbox (CVE-2026-14540)

Google assigned CVE-2026-14540, a CVSS 8.0 server-side request forgery in its MCP Toolbox for Databases, where the HTTP client was initialized without a CheckRedirect policy or target IP validation, a…

06:46

2026-08-25

news.ycombinator.com

ai-safety

I found an SSRF in Google's official AI tooling, and how Google reacted

A security researcher found a server-side request forgery (SSRF) vulnerability in Google's MCP Toolbox, the official server for connecting language-model agents to databases and HTTP APIs, which could…

// co-occurs with top 8 entities

Google 2 MCP Toolbox 1 SSRFGuard 1 MCP Toolbox for Databases 1 mcp-safeguard 1 googleapis/mcp-toolbox 1 PyPI 1 Zenodo 1

// topics top 5 topics

ai safety 2 ai tools 2 ai agents 2 agent protocols 1 developer tools 1