PT-2026-7725 · Unknown+1 · Sf-Mcp-Server+3

Akutishevsky · Published 2026-02-11 · Updated 2026-02-13 · CVE-2026-26029

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sf-mcp-server (affected versions not specified)

Description A command injection issue exists in sf-mcp-server, an implementation of Salesforce MCP server for Claude for Desktop. The issue is due to the unsafe use of the child process.exec function when building Salesforce CLI commands with input controlled by the user. Successful exploitation could allow attackers to execute arbitrary shell commands with the privileges of the MCP server process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-26029

GHSA-H4W9-G9C5-VFWQ

Affected Products

Claude For Desktop

Salesforce Cli

Salesforce Mcp Server

Sf-Mcp-Server

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26029.json · Exploit
• 🔥 https://github.com/akutishevsky/sf-mcp-server/security/advisories/GHSA-h4w9-g9c5-vfwq · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26029 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26029 · Vendor Advisory
• https://github.com/akutishevsky/sf-mcp-server/commit/99fba0171b8c22b5ee3c0405053ccfd2910a066d · Note
• https://twitter.com/CVEnew/status/2021714590867050579 · Twitter Post
• https://wp-vitesse-pro.fr/article/cyberattaque-odido-fuite-donnees-2026 · Reddit Post