CVE-2026-117561 - sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values
CVE ID :CVE-2026-117561 Published : Oct. 27, 2026, 2:16 p.m. | 7 minutes ago Description :Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue()...