← All credits

HaoNH Leader Redteam From VINCSS ( Member Of Vingroup ).

1 vulnerability record and advisories credit this contributor.

CVE-2026-11718
An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When the toolbox validates an opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), it decodes the respo