PT-2026-66663

Name of the Vulnerable Software and Affected Versions Google mcp-toolbox versions 1.3.0 through 1.4.0 Description Incorrect authorization in the direct HTTP API tool invocation endpoint allows an unauthenticated attacker to invoke tools protected by the scopeRequired feature. This occurs when too...