Sf-Mcp (<= 1.3.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/sf-mcp--1.3.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 15:50:19 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCodefriar sf-mcp: OS command injection via Salesforce CLI flags (CVE-2026-117561)https://feed.craftedsignal.io/briefs/2026-10-codefriar-sf-mcp-rce/Tue, 27 Oct 2026 15:50:19 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-codefriar-sf-mcp-rce/The sf-mcp package through version 1.3.2 is vulnerable to OS command injection due to insufficient sanitization of Salesforce CLI flag values in the escapeValue function, allowing remote code execution.Codefriar sf-mcp contains an OS command injection vulnerability in the escapeValue() function within src/utils.ts. The application fails to properly neutralize shell metacharacters, including backticks and $() substitution, when processing flags for the Salesforce CLI. These unsanitized values are subsequently passed to execSync in executeSfCommand, leading to arbitrary command execution as the user running the MCP server process.

Impact

An attacker can execute arbitrary shell commands with the privileges of the user running the MCP server, potentially leading to unauthorized data access, system modification, or further lateral movement within the environment.

Recommendation

  • Update the sf-mcp package to a version beyond 1.3.2 to remediate the vulnerability in src/utils.ts.
  • Review logs for the MCP server process for unexpected child processes or unusual command-line arguments involving Salesforce CLI flags.
  • Audit environments running sf-mcp to ensure the process runs with the principle of least privilege, minimizing the impact of potential command execution.
]]>highadvisory