CVE-2026-117561 Details
Description
Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue() in src/utils.ts fails to neutralize backticks, $() substitution, and other shell metacharacters, these values reach execSync in executeSfCommand and run as the MCP server user.
A command injection vulnerability has been identified in Codefriar sf-mcp versions through 1.3.2. This vulnerability allows attackers to execute arbitrary shell commands by sending specially crafted flag values through the Salesforce CLI integration. The issue arises because the 'escapeValue()' function in 'src/utils.ts' does not properly sanitize shell metacharacters, such as backticks and command substitution syntax, allowing these values to be passed directly to 'execSync' in the 'executeSfCommand' function, where they are executed as the MCP server user.
Users are advised to update to a version of Codefriar sf-mcp that has addressed this vulnerability. The recommended fix involves replacing the 'escapeValue()' function with a proper shell-safe handling method, such as using 'execFileSync' with argument arrays to avoid shell interpretation.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/codefriar/sf-mcp/issues/17 | CISA-ADP | ExploitIssue TrackingTechnical AnalysisVendor |
| https://github.com/codefriar/sf-mcp | [email protected] | Source CodeVendor |
| https://github.com/codefriar/sf-mcp/blob/beb103dced68962e0c069b62cb377286751d0103/src/utils.ts#L79-L90 | [email protected] | |
| https://github.com/codefriar/sf-mcp/issues/17 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/sf-mcp-through-1.3.2-os-command-injection-via-salesforce-cli-flag-values | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Codefriar sf-mcp | <= 1.3.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | [email protected] |