codefriar

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

codefriar records in CISA KEV

No codefriar vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-81165 CVE-2026-117561 · GHSA-rjw8-q97p-7xhf

OS command injection in sf-mcp via Salesforce CLI flag values

HIGH 72

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00652 Published 2026-10-27 No fix listed CWE-78

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0