CVE-2026-117561— sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values

Quick assessment

Affected

codefriar sf-mcp

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Codefriar sf-mcp 1.3.2 及更早版本存在操作系统命令注入漏洞。攻击者可通过提供精心构造的 Salesforce CLI 工具标志值来执行 Shell 命令。由于中的函数未能有效转义反引号（ $() executeSfCommand execSync` 调用，并以 MCP 服务器用户的身份执行。

CVSS 7.8 · High Updated Oct 27, 2026

Possible ATT&CK Techniques 2 AI

T1190 · Exploit Public-Facing Application T1059.004 · Unix Shell

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values

Source: CVE Program / CVE List V5

Vulnerability Description

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue() in src/utils.ts fails to neutralize backticks, $() substitution, and other shell metacharacters, these values reach execSync in executeSfCommand and run as the MCP server user.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
codefriar	sf-mcp	0 ~ 1.3.2	-

II. Public POCs for CVE-2026-117561

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-117561

请登录查看更多情报信息。

Other References for CVE-2026-117561 (4)

https://github.com/codefriar/sf-mcp product
https://github.com/codefriar/sf-mcp/blob/beb103dced68962e0c069b62cb377286751d0103/src/utils.ts#L79-L90 technical-description
https://github.com/codefriar/sf-mcp/issues/17 issue-tracking
https://www.vulncheck.com/advisories/sf-mcp-through-1.3.2-os-command-injection-via-salesforce-cli-flag-values third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-117561

IV. Related Vulnerabilities

Same weakness: CWE-78