What is the CVSS score of CVE-2026-25650?

CVE-2026-25650 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-25650?

A vulnerability in MCP Salesforce Connector versions prior to 0.1.10 allows attackers to extract Salesforce authentication tokens through arbitrary attribute access, potentially compromising customer…. A patch is available.

How to fix or mitigate CVE-2026-25650?

Within 24 hours: Identify all systems running MCP Salesforce Connector and document current versions in use. Within 7 days: Apply patch to version 0.1.10 or later across all affected systems, testing in non-production environments first. Within 30 days: Conduct security audit of Salesforce access logs for unauthorized activity and rotate Salesforce authentication credentials as a precautionary measure.

AI / ML CVE-2026-25650

HIGH

Information Exposure (CWE-200)

2026-02-06 security-advisories@github.com

GHSA-vf6j-c56p-cq58

Information Disclosure AI / ML Mcp Salesforce Connector

7.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

Patch released

Feb 24, 2026 - 20:59 nvd

Patch available

CVE Published

Feb 06, 2026 - 19:16 nvd

HIGH 7.5

DescriptionGitHub Advisory

MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.

AnalysisAI

Unauthenticated attackers can exploit arbitrary attribute access in MCP Salesforce Connector versions prior to 0.1.10 to extract sensitive Salesforce authentication tokens. This vulnerability requires only network access with no user interaction, enabling complete disclosure of credentials used for Salesforce API integration. Organizations using affected versions should upgrade to 0.1.10 immediately.

Technical ContextAI

Classified as CWE-200 (Information Exposure). Affects Mcp Salesforce Connector. MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.