id: PYSEC-2026-2629
published: "2026-07-13T14:36:35.117125Z"
modified: "2026-07-13T16:04:49.393365Z"
aliases:
- CVE-2026-25650
- GHSA-vf6j-c56p-cq58
summary: MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token
details: "### Impact\n_Disclosure of Salesforce OAuth bearer tokens used by the MCP._\n\n### Patches\n_fix applied in 0.1.10_\n\n### Workarounds\n_Rotate any Salesforce tokens/credentials used by MCP-Salesforce._"
affected:
- package:
    name: mcp-salesforce-connector
    ecosystem: PyPI
    purl: pkg:pypi/mcp-salesforce-connector
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 0.1.10
  versions:
  - 0.1.0
  - 0.1.1
  - 0.1.2
  - 0.1.3
  - 0.1.4
  - 0.1.6
  - 0.1.8
  - 0.1.9
references:
- type: WEB
  url: https://github.com/smn2gnt/MCP-Salesforce/security/advisories/GHSA-vf6j-c56p-cq58
- type: ADVISORY
  url: https://nvd.nist.gov/vuln/detail/CVE-2026-25650
- type: WEB
  url: https://github.com/smn2gnt/MCP-Salesforce/commit/a1e3a5a786f48508d066b6d40b58201ebf9b7fd6
- type: PACKAGE
  url: https://github.com/smn2gnt/MCP-Salesforce
- type: WEB
  url: https://github.com/smn2gnt/MCP-Salesforce/releases/tag/v0.1.10
- type: PACKAGE
  url: https://pypi.org/project/mcp-salesforce-connector
- type: ADVISORY
  url: https://github.com/advisories/GHSA-vf6j-c56p-cq58
severity:
- type: CVSS_V4
  score: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N