CVE-2025-64320

The Salesforce Agentforce Vibes Extension (versions prior to 3.2.0 ) is vulnerable to Code Injection due to improper neutralization of input used for LLM prompting. An attacker could manipulate inputs used in prompts for Large Language Models to execute arbitrary code. Remediation involves updati...

CVE-2025-64322

The Salesforce Agentforce Vibes Extension is vulnerable to an incorrect permission assignment for a critical resource in versions prior to 3.3.0 (some sources specify before 3.2.0). This flaw allows an attacker to manipulate writeable configuration files . To remediate this issue, it is recommend...

CVE-2025-64321

The Salesforce Agentforce Vibes Extension is vulnerable to an Improper Neutralization of Input Used for LLM Prompting vulnerability (CWE-1427/CWE-94). This issue exists in versions prior to 3.3.0 (specifically noted as prior to 3.2.0 in some records) and allows an attacker to manipulate writeable...