CVE-2025-64321

Publication date

2025-11-04 18:30:39

Family

Salesforce

State

PUBLISHED

Description

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.