p PatchFirst

PatchFirst · Latest vulnerabilities

mcp-salesforce-connector vulnerabilities

Vulnerabilities published for mcp-salesforce-connector in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-25650

    Medium · CVSS 6.6EPSS 0.46%Fix available

    MCP Salesforce Connector has arbitrary attribute access which leads to disclosure of Salesforce auth token

    MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.

    mcp-salesforce-connectorPython
    • Update to 0.1.10
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →