2 matches found
CVE-2026-117561
Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue in src/utils.ts fails to neutralize backticks, $ substitution, and other shell metacharacters,...
8.5CVSS0.00652EPSS
SaveExploits0References4
EUVD-2026-110839
Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue in src/utils.ts fails to neutralize backticks, $ substitution, and other shell metacharacters,...
8.5CVSS6.3AI score0.00652EPSS
SaveExploits0References4
20