gcdRadar
archive/Patch now/AIR-2026-0957
closedclosed 6 Feb 2026Patch now2 Disclosed vulnerabilityAI

CVE-2026-25650: MCP Salesforce Connector Auth Token Disclosure Vulnerability

MCP Salesforce Connector

An arbitrary attribute access vulnerability exists in the MCP Salesforce Connector prior to version 0.1.10. Exploitation allows the disclosure of Salesforce authentication tokens, which has been resolved in the patched release.

disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why

CVSS
8.7
EPSS
<0.01 · top 60% · 2026-11-13
EPSS scores by FIRST
fix status
Fix status unknown
first report
6 Feb 2026
last update
6 Feb 2026
CVE ids
CVE-2026-25650other records

Timeline · 1

  1. 6 Feb 2026CVE-2026-25650: MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration.

Sources · 1

Advisories and databases

  1. 2026-02-06
    CVE-2026-25650: MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration.
    NVD · nvd.nist.gov/vuln/detail/CVE-2026-25650

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Patch now
AI role
Attack on AI
categories
Infrastructure vulnerabilityData leak
severity
2 · Disclosed vulnerability
fix status
Fix status unknown
targets
Framework / tooling
owasp llm top 10
LLM02:2025 Sensitive Information DisclosureLLM03:2025 Supply Chain
mitre atlas
no technique for these categories
tags
mcpsalesforce
dates
happened 6 Feb 2026 · first reported 6 Feb 2026
origin
NVD
Vulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
record
confidence 0.95 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# CVE-2026-25650: MCP Salesforce Connector Auth Token Disclosure Vulnerability

https://gcdradar.vercel.app/incidents/cve-2026-25650-mcp-salesforce-connector-auth-token-disclosur · AIR-2026-0957 · closed 2026-02-06

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-02-06
- AI role: Attack on AI
- Products: MCP Salesforce Connector
- CVE ids: CVE-2026-25650
- CVSS: 8.7

## Summary

An arbitrary attribute access vulnerability exists in the MCP Salesforce Connector prior to version 0.1.10. Exploitation allows the disclosure of Salesforce authentication tokens, which has been resolved in the patched release.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-02-06: CVE-2026-25650: MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. (https://nvd.nist.gov/vuln/detail/CVE-2026-25650)

## Sources

- 2026-02-06 NVD: CVE-2026-25650: MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. https://nvd.nist.gov/vuln/detail/CVE-2026-25650

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Flowise Flowise Vulnerable to PII Disclosure

    Patch now · Disclosed · since 5 Mar 2026

    AI
  2. closed7.1
    MCP SDKs CVE-2026-25536: Model Context Protocol SDK cross-client data leak

    Patch now · Disclosed · since 4 Feb 2026 · CVE-2026-25536

    AI
  3. closed8.7
    AnythingLLM CVE-2026-24477: AnythingLLM API Key Exposure Vulnerability

    Patch now · Disclosed · since 27 Jan 2026 · CVE-2026-24477

    AI
  4. closed5.3
    Claude Code + SDKs CVE-2026-21852: Claude Code Data Leak via Malicious Config

    Patch now · Disclosed · since 21 Jan 2026 · CVE-2026-21852

    AI
  5. closed7.4
    Langflow CVE-2026-8470: IBM Langflow OSS Weak Cryptographic Key Generation

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-8470

    AI
  6. closed7.1
    Langflow IBM Langflow OSS authorization bypass in MemoryComponent leads to chat history exposure

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-9130

    AI