Hacker News
I found an SSRF in Google's official MCP Toolbox (CVE-2026-14540)
https://anas-security-portfolio.vercel.app/google-mcp-ssrf.html
Comments
rfgplk
Sep 28, 2026, 7:59 AM
Google's products are littered with CVEs. Disappointing for a supposed "frontier" lab. Can't they hire competent people?