mcp-salesforce-connector vulnerabilities

CVEs whose affected-version data names the mcp-salesforce-connector package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-25650High

MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token

MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token

▾ Twilightmcp-salesforce-connector · mcp-salesforce-connectorEPSS 0.52%via OSV

mcp-salesforce-connector vulnerabilities (CVEs) · VulnSea