NewApp Monitoring is liveSign up free
AgentbeamBeta
AI agent vulnerability · Other MCP servers and tools

CVE-2026-25650: MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token

highCVSS 4.0 8.7GHSA-vf6j-c56p-cq58

Impact Disclosure of Salesforce OAuth bearer tokens used by the MCP. Patches fix applied in 0.1.10 Workarounds Rotate any Salesforce tokens/credentials used by MCP-Salesforce.

Published Feb 6, 2026 · Updated Feb 8, 2026

Affected packages

mcp-salesforce-connector

Ecosystem
PyPI
Affected
< 0.1.10
Fixed in
0.1.10
Check
pip show mcp-salesforce-connector

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Impact

_Disclosure of Salesforce OAuth bearer tokens used by the MCP._

Patches

_fix applied in 0.1.10_

Workarounds

_Rotate any Salesforce tokens/credentials used by MCP-Salesforce._

Credited to nirhaas.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries