https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:18:12.060370+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267682 EUVD-2026-267682 2026-10-15T23:18:12.122977+00:00 EUVD-2026-267682 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25650 fkie_cve-2026-25650 2026-10-15T23:18:12.123014+00:00

MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.

 https://cve.radiocsirt.org/vuln/ghsa-vf6j-c56p-cq58 GHSA-vf6j-c56p-cq58 — MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token 2026-10-15T23:18:12.123046+00:00

Affected: PyPI: mcp-salesforce-connector

### Impact _Disclosure of Salesforce OAuth bearer tokens used by the MCP._

### Patches _fix applied in 0.1.10_

### Workarounds _Rotate any Salesforce tokens/credentials used by MCP-Salesforce._

 https://cve.radiocsirt.org/vuln/pysec-2026-2629 PYSEC-2026-2629 — MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token 2026-10-15T23:18:12.123078+00:00

Affected: PyPI: mcp-salesforce-connector

### Impact _Disclosure of Salesforce OAuth bearer tokens used by the MCP._

### Patches _fix applied in 0.1.10_

### Workarounds _Rotate any Salesforce tokens/credentials used by MCP-Salesforce._