Tag: CVE-2026-11720

CVE-2026-11720 — Critical vulnerability brief

A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes…