PT-2026-6777 · Unknown+1 · Mcp-Salesforce-Connector+1

Mn2Gnt · Published 2026-02-06 · Updated 2026-04-23 · CVE-2026-25650

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MCP Salesforce Connector versions prior to 0.1.10

Description The software is a Model Context Protocol (MCP) server implementation for Salesforce integration. A flaw exists where arbitrary attribute access can lead to the disclosure of Salesforce authentication tokens. The issue affects the disclosure of Salesforce OAuth bearer tokens used by the MCP.

Recommendations Update to version 0.1.10 or later. Rotate any Salesforce tokens or credentials used by MCP-Salesforce.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-25650

GHSA-VF6J-C56P-CQ58

Affected Products

Mcp-Salesforce-Connector

Salesforce

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25650.json · Exploit
• https://github.com/smn2gnt/MCP-Salesforce/security/advisories/GHSA-vf6j-c56p-cq58 · Vendor Advisory
• https://github.com/smn2gnt/MCP-Salesforce/commit/a1e3a5a786f48508d066b6d40b58201ebf9b7fd6 · Patch
• https://osv.dev/vulnerability/CVE-2026-25650 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vf6j-c56p-cq58 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25650 · Security Note
• https://github.com/smn2gnt/MCP-Salesforce/releases/tag/v0.1.10 · Note
• https://github.com/smn2gnt/MCP-Salesforce · Note
• https://twitter.com/CVEnew/status/2019857597793194036 · Twitter Post
• https://twitter.com/ai_security_10x/status/2047392439980507516 · Twitter Post
• https://twitter.com/ai_security_10x/status/2047150488941146206 · Twitter Post