PT-2025-39170 · Salesforce · Salesforce Cli

Crispr Xiang · Published 2025-09-23 · Updated 2025-09-25 · CVE-2025-9844

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Salesforce CLI versions prior to 2.106.6

Description A flaw exists in the Salesforce CLI on Windows that allows for malicious DLL injection due to an uncontrolled search path element. This can lead to the replacement of trusted executables.

Recommendations Update Salesforce CLI to version 2.106.6 or later.

Fix

RCE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-9844

Affected Products

Salesforce Cli

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-9844 · Security Note
• https://help.salesforce.com/s/articleView?id=005224301&type=1 · Note
• https://twitter.com/ZeroPathLabs/status/1970502340730933540 · Twitter Post
• https://twitter.com/CVEnew/status/1970621810627748099 · Twitter Post
• https://t.me/pentestingnews/68602 · Telegram Post
• https://t.me/CVEtracker/33170 · Telegram Post
• https://reddit.com/r/salesforce/comments/1npydqx/cli_tool_attack_vector_whats_the_deal_with_this · Reddit Post
• https://twitter.com/fridaysecurity/status/1970691643343872226 · Twitter Post
• https://twitter.com/dailytechonx/status/1970971506017698103 · Twitter Post