Threats tagged 'ghsa-rjw8-q97p-7xhf'

Codefriar sf-mcp versions through 1.3.2 have an OS command injection vulnerability. This flaw allows attackers with limited privileges to execute arbitrary shell commands by crafting Salesforce CLI tool flag values. The vulnerability arises because the escapeValue() function does not properly neutralize shell metacharacters such as backticks and $() substitution, leading to command execution as the MCP server user.