Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-64322 EUVD-2025-37838GHSA-4hrg-69hg-xq77

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable …

Published Nov 4, 2025 · Updated Nov 11, 2025 · Assigned by Salesforce

Vendor: Salesforce Product: Agentforce Vibes Extension

Description

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.

Affected products

VendorProductAffectedFixed
Salesforce Agentforce Vibes Extension < 3.3.0 3.3.0

References