CVE-2026-25650: mcp-salesforce-connector Arbitrary Attribute Access Leading to Salesforce Auth Token Disclosure
Summary
CVE-2026-25650: MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token. Affects mcp-salesforce-connector versions < 0.1.10. Fixed in 0.1.10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mcp-salesforce-connector is a Python package designed to facilitate integration between applications and Salesforce, enabling seamless data exchange and interaction with Salesforce APIs. This package is widely used in various applications that require Salesforce functionalities. However, it has been found to be vulnerable to arbitrary attribute access, which can lead to unauthorized disclosure of sensitive information, specifically Salesforce OAuth bearer tokens.
Vulnerability Detail
The vulnerability arises from improper handling of attributes within the mcp-salesforce-connector package, allowing attackers to access arbitrary attributes. This flaw can lead to the exposure of Salesforce OAuth bearer tokens, which are critical for authenticating API requests. If an attacker gains access to these tokens, they can impersonate legitimate users and perform unauthorized actions within Salesforce, potentially leading to data breaches and loss of sensitive information.
How To Fix
Minimum fixed version
0.1.10
This is the first release that contains the fix.
pip install --upgrade "mcp-salesforce-connector==0.1.10"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As an immediate workaround, it is advisable to rotate any Salesforce tokens or credentials used by the mcp-salesforce-connector. This can help mitigate the risk of unauthorized access until the package is updated. Ensure that all applications using these tokens are updated with the new credentials.
Conclusion
The mcp-salesforce-connector package has a critical vulnerability (CVE-2026-25650) that allows arbitrary attribute access, leading to the potential disclosure of Salesforce OAuth bearer tokens. It is crucial to update to version 0.1.10 or later to mitigate this risk. Additionally, rotating credentials can provide temporary relief until the update is applied.
See every vulnerability recorded for mcp-salesforce-connector →
FAQ
The CVSS score of this vulnerability is 8.7, indicating a high severity level.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If exploited, this vulnerability can lead to unauthorized access to Salesforce OAuth bearer tokens, allowing attackers to impersonate users and perform unauthorized actions.
Yes, a patch has been applied in version 0.1.10 of the mcp-salesforce-connector package.
If immediate updates are not possible, rotate your Salesforce tokens and credentials to minimize the risk of unauthorized access.
