← All credits

HaoNH Leader Redteam From VINCSS ( Member Of Vingroup )

1 vulnerability record and advisories credit this contributor.

CVE-2026-11717
An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), the toolbox decodes the