CyberRota Analysis
AI-GeneratedThe Google OAuth provider component in version 1.4.0 of the Google mcp-toolbox is vulnerable due to an authentication bypass that occurs when the authService is initialized with mcpEnabled: true without a defined audience or clientId. This flaw allows any valid Google OAuth access token to be accepted, potentially granting unauthorized access to sensitive tools and data. Organizations utilizing this version of the mcp-toolbox should prioritize remediation to prevent unauthorized access to their systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for opaque tokens skips audience validation entirely. As a result, the toolbox will accept any valid Google OAuth access token—even those minted for unrelated ecosystem applications—granting unauthorized clients access to protected tools and data backends.
Related CVEs
Other vulnerabilities affecting the same vendor(s)