{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3acodefriarsf-mcp/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:codefriar:sf-mcp:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-117561"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["sf-mcp (\u003c= 1.3.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Codefriar"],"content_html":"\u003cp\u003eCodefriar sf-mcp contains an OS command injection vulnerability in the \u003ccode\u003eescapeValue()\u003c/code\u003e function within \u003ccode\u003esrc/utils.ts\u003c/code\u003e. The application fails to properly neutralize shell metacharacters, including backticks and \u003ccode\u003e$()\u003c/code\u003e substitution, when processing flags for the Salesforce CLI. These unsanitized values are subsequently passed to \u003ccode\u003eexecSync\u003c/code\u003e in \u003ccode\u003eexecuteSfCommand\u003c/code\u003e, leading to arbitrary command execution as the user running the MCP server process.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker can execute arbitrary shell commands with the privileges of the user running the MCP server, potentially leading to unauthorized data access, system modification, or further lateral movement within the environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the \u003ccode\u003esf-mcp\u003c/code\u003e package to a version beyond 1.3.2 to remediate the vulnerability in \u003ccode\u003esrc/utils.ts\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eReview logs for the MCP server process for unexpected child processes or unusual command-line arguments involving Salesforce CLI flags.\u003c/li\u003e\n\u003cli\u003eAudit environments running \u003ccode\u003esf-mcp\u003c/code\u003e to ensure the process runs with the principle of least privilege, minimizing the impact of potential command execution.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T15:50:19Z","date_published":"2026-10-27T15:50:19Z","id":"https://feed.craftedsignal.io/briefs/2026-10-codefriar-sf-mcp-rce/","summary":"The sf-mcp package through version 1.3.2 is vulnerable to OS command injection due to insufficient sanitization of Salesforce CLI flag values in the escapeValue function, allowing remote code execution.","title":"Codefriar sf-mcp: OS command injection via Salesforce CLI flags (CVE-2026-117561)","url":"https://feed.craftedsignal.io/briefs/2026-10-codefriar-sf-mcp-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:codefriar:sf-Mcp:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}