Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-64321 EUVD-2025-37829GHSA-x7cq-fpc4-629v

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeabl…

Published Nov 4, 2025 · Updated Nov 11, 2025 · Assigned by Salesforce

Description

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.

Affected products

VendorProductAffectedFixed
Salesforce Agentforce Vibes Extension < 3.3.0 3.3.0

References