CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0...

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

CVE-2025-64321

The Salesforce Agentforce Vibes Extension is vulnerable to an Improper Neutralization of Input Used for LLM Prompting vulnerability (CWE-1427/CWE-94). This issue exists in versions prior to 3.3.0 (specifically noted as prior to 3.2.0 in some records) and allows an attacker to manipulate writeable...

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

CVE-2025-64320

The Salesforce Agentforce Vibes Extension (versions prior to 3.2.0 ) is vulnerable to Code Injection due to improper neutralization of input used for LLM prompting. An attacker could manipulate inputs used in prompts for Large Language Models to execute arbitrary code. Remediation involves updati...