Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-43698 EUVD-2025-17664GHSA-gqmw-jrgv-446q

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for …

Published Jun 10, 2025 · Updated Jun 11, 2025 · Assigned by Salesforce

Description

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects.
This impacts OmniStudio: before Spring 2025

Affected products

VendorProductAffectedFixed
Salesforce OmniStudio < Spring 2025 Spring 2025

References