CVE-2026-117561highCWE-78

CVE-2026-117561: high-severity vulnerability in codefriar sf-mcp

sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values

Published

Follow this CVE+ Monitor sf-mcp

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.5epss 0.7%
from disclosure to weapon6 days
Published on NVDOct 27
1st PoC+6d
Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue() in src/utils.ts fails to neutralize backticks, $() substitution, and other shell metacharacters, these values reach execSync in executeSfCommand and run as the MCP server user.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
codefriar · sf-mcp
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.