Vendor
The sf-mcp package through version 1.3.2 is vulnerable to OS command injection due to insufficient sanitization of Salesforce CLI flag values in the escapeValue function, allowing remote code execution.