CVE-2026-25650

HIGH

mcp-salesforce-connector < 0.1.10 - Exposure of Sensitive Information via Arbitrary Attribute Access

Title source: llm

Description

MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://github.com/smn2gnt/MCP-Salesforce/security/advisories/GHSA-vf6j-c56p-cq58

Patch x_refsource_misc

https://github.com/smn2gnt/MCP-Salesforce/commit/a1e3a5a786f48508d066b6d40b58201ebf9b7fd6

View Patch ZIP pw:eip

Release Notes x_refsource_misc

https://github.com/smn2gnt/MCP-Salesforce/releases/tag/v0.1.10

Scores

CVSS v3 7.5

EPSS 0.0041

EPSS Percentile 32.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (2)

pypi/mcp-salesforce-connector 0 - 0.1.10PyPI

smn2gnt/mcp_salesforce_connector < 0.1.10

Published Feb 06, 2026

Tracked Since Feb 18, 2026