Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-64320 EUVD-2025-37830GHSA-x649-8g7w-vfq7

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This i…

Published Nov 4, 2025 · Updated Nov 5, 2025 · Assigned by Salesforce

Description

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0.

Affected products

VendorProductAffectedFixed
Salesforce Agentforce Vibes Extension < 3.2.0 3.2.0

References