Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 23:18:18 +0000 CVE-2026-25650 — MCP Salesforce Connector has arbitrary attribute access which leads to disclosure of Salesforce auth token https://cve.radiocsirt.org/vuln/cve-2026-25650 <p><strong>Affected:</strong> smn2gnt MCP-Salesforce</p> <p>MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.</p> <p><strong>Affected:</strong> smn2gnt MCP-Salesforce</p> <p>MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.</p> https://cve.radiocsirt.org/vuln/cve-2026-25650 GHSA-vf6j-c56p-cq58 — MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token https://cve.radiocsirt.org/vuln/ghsa-vf6j-c56p-cq58 <p><strong>Affected:</strong> PyPI: mcp-salesforce-connector</p> <p>### Impact _Disclosure of Salesforce OAuth bearer tokens used by the MCP._</p> <p>### Patches _fix applied in 0.1.10_</p> <p>### Workarounds _Rotate any Salesforce tokens/credentials used by MCP-Salesforce._</p> <p><strong>Affected:</strong> PyPI: mcp-salesforce-connector</p> <p>### Impact _Disclosure of Salesforce OAuth bearer tokens used by the MCP._</p> <p>### Patches _fix applied in 0.1.10_</p> <p>### Workarounds _Rotate any Salesforce tokens/credentials used by MCP-Salesforce._</p> https://cve.radiocsirt.org/vuln/ghsa-vf6j-c56p-cq58