Skip to content
OpenAdvisories

Vendor

smn2gnt

1 known vulnerabilities.

Products

MCP-Salesforce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2026-25650

    MCP Salesforce Connector has arbitrary attribute access which leads to disclosure of Salesforce auth token

    MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.

    smn2gnt MCP-Salesforce mcp-salesforce-connector PyPI