Description
MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| smn2gnt | MCP-Salesforce | < 0.1.10 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | mcp-salesforce-connector | < 0.1.10 | 0.1.10 | GHSA-vf6j-c56p-cq58 |