I found an SSRF in Google's official AI tooling, and how Google reacted

By AnasSyed28 · 2026-08-25 · 2 points · 0 comments

Earlier this year I found a server-side request forgery bug in Google's MCP Toolbox, the official server Google publishes for connecting language-model agents to databases and HTTP APIs. I reported it. Google fixed it in eight days, credited me by name, and the fix later became…

Open the full discussion on BetterNews