OS Command Injection Vulnerability in Codefriar sf-mcp
CVE-2026-117561

8.5HIGH

Key Information:

Vendor: Codefriar
Status: Sf-mcp
Vendor: CVE Published:; 27 October 2026

What is CVE-2026-117561?

Codefriar sf-mcp before version 1.3.3 is vulnerable to an OS command injection attack. This vulnerability arises due to improper handling of inputs in the escapeValue() function within src/utils.ts, which fails to neutralize shell metacharacters such as backticks and $() substitutions. Attackers can exploit this weakness by crafting specific Salesforce CLI tool flag values, allowing them to execute arbitrary shell commands as the MCP server user, potentially leading to unauthorized actions on the server.