---
id: CVE-2026-25650
aliases:
  - GHSA-vf6j-c56p-cq58
  - PYSEC-2026-2629
title: >-
  MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce
  auth token
summary: >-
  MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce
  auth token
severity: high
vendor: mcp-salesforce-connector
product: mcp-salesforce-connector
ecosystem: pip
affected:
  - mcp-salesforce-connector < 0.1.10
patched:
  - mcp-salesforce-connector 0.1.10
published: '2026-02-06'
updated: '2026-07-13'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-vf6j-c56p-cq58'
references:
  - url: >-
      https://github.com/smn2gnt/MCP-Salesforce/security/advisories/GHSA-vf6j-c56p-cq58
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-25650'
  - url: >-
      https://github.com/smn2gnt/MCP-Salesforce/commit/a1e3a5a786f48508d066b6d40b58201ebf9b7fd6
  - url: 'https://github.com/smn2gnt/MCP-Salesforce'
  - url: 'https://github.com/smn2gnt/MCP-Salesforce/releases/tag/v0.1.10'
tags:
  - osv
  - pip
epss: 0.00425
epssPercentile: 0.36438
ingestedAt: '2026-07-13T18:58:03.507Z'
---

## Overview

### Impact
_Disclosure of Salesforce OAuth bearer tokens used by the MCP._

### Patches
_fix applied in 0.1.10_

### Workarounds
_Rotate any Salesforce tokens/credentials used by MCP-Salesforce._

## Affected packages

- `mcp-salesforce-connector < 0.1.10`

## Remediation

Upgrade to a patched release:

- `mcp-salesforce-connector 0.1.10`