CVE-2026-11720

A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the input does not alter the scheme, host, or user info, it relies on ResolveReference for the final URL resolution. Because dot segments (../) are normalized during this resolution step, an attacker can supply path parameters containing directory traversal sequences to escape the operator-configured path scope. This allows the client to coerce the toolbox into making requests to unintended endpoints on the same target host while forwarding the toolbox's configured credentials (e.g., bypassing a restricted path like /api/v1/users/{{.id}} to reach /admin/secrets).

• CWE-22

• https://github.com/googleapis/mcp-toolbox/pull/3218Issue Tracking, Patch

Published

Jun 29, 2026

Last Modified

Jul 1, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11712IBM WebSphere Application Server 9.0, and 8.5 is affected by…9.3
• CVE-2026-11714IBM WebSphere Application Server Liberty is affected by a se…9.8
• CVE-2026-11717An authentication bypass vulnerability exists in the generic…9.3
• CVE-2026-11718An authentication bypass vulnerability exists in the generic…9.3
• CVE-2026-11719An authenticated authorization bypass vulnerability exists i…8.6
• CVE-2026-1172A vulnerability has been found in birkir prime up to 0.4.0.b…7.5
• CVE-2026-11721It is possible for an attacker's zone to respond to a query …7.5
• CVE-2026-1173A vulnerability was found in birkir prime up to 0.4.0.beta.0…9.8
• CVE-2026-11733A buffer overflow vulnerability in the listed NETGEAR models…1.1
• CVE-2026-11734A buffer overflow vulnerability in the listed NETGEAR models…1.1
• CVE-2026-11735A stack-based buffer overflow vulnerability affects the list…1.9
• CVE-2026-11736A stack-based buffer overflow vulnerability affects certain …1.9