CVE-2026-19202

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-19202
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19202.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-19202
Published
2026-09-22T21:48:26Z
Modified
2026-09-25T03:30:51Z
Severity
  • 9.1 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Token Cache Reuse in mcp-toolbox-sdk-python
Details

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application uses the SDK to authenticate to two or more different audiences within the same process, the module-level token cache fails to key its cached tokens by the requested audience. Consequently, a valid, unexpired token minted for a sensitive service (Service A) can be retrieved from the cache and sent to a secondary service (Service B). An attacker who operates, compromises, or monitors traffic to Service B can capture this token and replay it to impersonate the victim application against Service A.

Database specific 
{
    "cna_assigner":  "Google",
    "cwe_ids":  [
        "CWE-524"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19202.json"
}
References

Affected packages

Git / github.com/googleapis/mcp-toolbox-sdk-python

Affected ranges

Type
GIT
Repo
https://github.com/googleapis/mcp-toolbox-sdk-python
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
aa299d3bc8524ec0b99770adee880ed32a1bf818
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "1.1.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

Other
release-please-262
release-please-285
release-please-304
release-please-317
release-please-343
release-please-373
release-please-381
release-please-432
release-please-491
release-please-493
release-please-516
release-please-517
release-please-518
release-please-519
release-please-526
release-please-527
release-please-528
release-please-529
release-please-557
release-please-558
release-please-559
release-please-564
release-please-574
release-please-575
release-please-576
release-please-577
release-please-588
release-please-589
release-please-590
release-please-591
release-please-611
toolbox-adk-v0.*
toolbox-adk-v0.5.6
toolbox-adk-v0.5.7
toolbox-adk-v0.5.8
toolbox-adk-v0.6.0
toolbox-adk-v0.6.1
toolbox-adk-v0.7.0
toolbox-adk-v1.*
toolbox-adk-v1.0.0
toolbox-core-v0.*
toolbox-core-v0.1.0
toolbox-core-v0.2.0
toolbox-core-v0.2.1
toolbox-core-v0.3.0
toolbox-core-v0.4.0
toolbox-core-v0.5.0
toolbox-core-v0.5.1
toolbox-core-v0.5.10
toolbox-core-v0.5.2
toolbox-core-v0.5.3
toolbox-core-v0.5.4
toolbox-core-v0.5.6
toolbox-core-v0.5.7
toolbox-core-v0.5.8
toolbox-core-v0.5.9
toolbox-core-v0.6.0
toolbox-core-v1.*
toolbox-core-v1.0.0
toolbox-core-v1.1.0
toolbox-langchain-v0.*
toolbox-langchain-v0.1.0
toolbox-langchain-v0.2.0
toolbox-langchain-v0.2.1
toolbox-langchain-v0.3.0
toolbox-langchain-v0.4.0
toolbox-langchain-v0.5.0
toolbox-langchain-v0.5.1
toolbox-langchain-v0.5.10
toolbox-langchain-v0.5.2
toolbox-langchain-v0.5.3
toolbox-langchain-v0.5.4
toolbox-langchain-v0.5.6
toolbox-langchain-v0.5.7
toolbox-langchain-v0.5.8
toolbox-langchain-v0.5.9
toolbox-langchain-v0.6.0
toolbox-langchain-v1.*
toolbox-langchain-v1.0.0
toolbox-llamaindex-v0.*
toolbox-llamaindex-v0.2.0
toolbox-llamaindex-v0.2.1
toolbox-llamaindex-v0.3.0
toolbox-llamaindex-v0.4.0
toolbox-llamaindex-v0.5.0
toolbox-llamaindex-v0.5.1
toolbox-llamaindex-v0.5.10
toolbox-llamaindex-v0.5.2
toolbox-llamaindex-v0.5.3
toolbox-llamaindex-v0.5.4
toolbox-llamaindex-v0.5.6
toolbox-llamaindex-v0.5.7
toolbox-llamaindex-v0.5.8
toolbox-llamaindex-v0.5.9
toolbox-llamaindex-v0.6.0
toolbox-llamaindex-v1.*
toolbox-llamaindex-v1.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19202.json"