CVE-2025-64321 — Salesforce / Agentforce Vibes Extension

CVE-2025-64321

Salesforce / Agentforce Vibes Extension PUBLISHED

Description (CNA)

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.

Affected (CNA)

Vendor / product	Versions
Salesforce / Agentforce Vibes Extension	affected 0 before 3.3.0

CWE

CWE-1427

References

https://help.salesforce.com/s/articleView?id=005228032&type=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.