GO-2026-5706 googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken) in github.com/googleapis/mcp-toolbox

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path validateOpaqueToken in github.com/googleapis/mcp-toolbox...

GO-2026-5251 googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken) in github.com/googleapis/mcp-toolbox

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path validateOpaqueToken in github.com/googleapis/mcp-toolbox...

CVE-2026-11718

An authentication bypass vulnerability exists in the generic opaque token validation path validateOpaqueToken of googleapis/mcp-toolbox. When the toolbox validates an opaque token via an OAuth 2.0 introspection endpoint RFC 7662, it decodes the response into an introspectResp struct. However, the...