CPE

Cpe:2.3:a:codefriar:sf-Mcp::::::::

1 brief RSS

Codefriar sf-mcp: OS command injection via Salesforce CLI flags (CVE-2026-117561)

The sf-mcp package through version 1.3.2 is vulnerable to OS command injection due to insufficient sanitization of Salesforce CLI flag values in the escapeValue function, allowing remote code execution.

sf-mcp

1t 1c 1h ago

Cpe:2.3:a:codefriar:sf-Mcp:*:*:*:*:*:*:*:*

Codefriar sf-mcp: OS command injection via Salesforce CLI flags (CVE-2026-117561)

Cpe:2.3:a:codefriar:sf-Mcp::::::::