Skip to content
OpenAdvisories
High · 8.8 CVE-2025-9844 EUVD-2025-30890GHSA-p96x-fw5c-mhr8

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects…

Published Sep 23, 2025 · Updated Feb 26, 2026 · Assigned by Salesforce

Vendor: Salesforce Product: Salesforce CLI

Description

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6.

Affected products

VendorProductAffectedFixed
Salesforce Salesforce CLI < 2.106.6 2.106.6

References