PT-2026-7725 · Unknown+1 · Sf-Mcp-Server+3

Akutishevsky · Publicado 2026-02-11 · Atualizado 2026-02-13 · CVE-2026-26029

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sf-mcp-server (affected versions not specified)

Description A command injection issue exists in sf-mcp-server, an implementation of Salesforce MCP server for Claude for Desktop. The issue is due to the unsafe use of the child process.exec function when building Salesforce CLI commands with input controlled by the user. Successful exploitation could allow attackers to execute arbitrary shell commands with the privileges of the MCP server process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-26029

GHSA-H4W9-G9C5-VFWQ

Produtos afetados

Claude For Desktop

Salesforce Cli

Salesforce Mcp Server

Sf-Mcp-Server

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26029.json · Exploit
• 🔥 https://github.com/akutishevsky/sf-mcp-server/security/advisories/GHSA-h4w9-g9c5-vfwq · Exploit
• https://github.com/akutishevsky/sf-mcp-server/commit/99fba0171b8c22b5ee3c0405053ccfd2910a066d · Nota
• https://twitter.com/CVEnew/status/2021714590867050579 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-26029 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-26029 · Aviso do Fabricante
• https://wp-vitesse-pro.fr/article/cyberattaque-odido-fuite-donnees-2026 · Publicação no Reddit