SF
Product
sf-mcp
by codefriar · last CVE Oct 27, 2026
1
CVEs
0
On KEV
7.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add sf-mcp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-117561
New
7.8–Oct 27
sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values
Affected: through 1.3.2
Showing 1