Google mcp-toolbox-sdk-python vulnerabilities (CVE)

CVE records published for Google mcp-toolbox-sdk-python, newest first. Follow to get an email when a new one appears.

1 results

9.1Critical

CVE-2026-19202 1 month ago

Token Cache Reuse in mcp-toolbox-sdk-python

Google mcp-toolbox-sdk-python

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application uses the SDK to authenticate to two or more different audiences within the same …