{"id":"CVE-2026-25650","aliases":["GHSA-vf6j-c56p-cq58","PYSEC-2026-2629"],"title":"MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token","summary":"MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token","severity":"high","vendor":"mcp-salesforce-connector","product":"mcp-salesforce-connector","ecosystem":"pip","affected":["mcp-salesforce-connector < 0.1.10"],"patched":["mcp-salesforce-connector 0.1.10"],"published":"2026-02-06","updated":"2026-07-13","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-vf6j-c56p-cq58","references":[{"url":"https://github.com/smn2gnt/MCP-Salesforce/security/advisories/GHSA-vf6j-c56p-cq58"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25650"},{"url":"https://github.com/smn2gnt/MCP-Salesforce/commit/a1e3a5a786f48508d066b6d40b58201ebf9b7fd6"},{"url":"https://github.com/smn2gnt/MCP-Salesforce"},{"url":"https://github.com/smn2gnt/MCP-Salesforce/releases/tag/v0.1.10"}],"tags":["osv","pip"],"epss":0.00425,"epssPercentile":0.36304,"ingestedAt":"2026-07-13T18:58:03.507Z","slug":"CVE-2026-25650","body":"## Overview\n\n### Impact\n_Disclosure of Salesforce OAuth bearer tokens used by the MCP._\n\n### Patches\n_fix applied in 0.1.10_\n\n### Workarounds\n_Rotate any Salesforce tokens/credentials used by MCP-Salesforce._\n\n## Affected packages\n\n- `mcp-salesforce-connector < 0.1.10`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `mcp-salesforce-connector 0.1.10`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}