PT-2025-45035 · Salesforce · Salesforce Agentforce Vibes Extension

Published 2025-11-04 · Updated 2025-11-11 · CVE-2025-64322

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Salesforce Agentforce Vibes Extension versions prior to 3.2.0

Description An incorrect permission assignment for a critical resource exists in Salesforce Agentforce Vibes Extension, allowing manipulation of writable configuration files.

Recommendations Update Salesforce Agentforce Vibes Extension to version 3.2.0 or later.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-64322

Affected Products

Salesforce Agentforce Vibes Extension

References · 6

• https://help.salesforce.com/s/articleView?id=005228032&type=1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64322 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64322 · Security Note
• https://t.me/CVEtracker/36547 · Telegram Post
• https://help.salesforce.com/s/articleView?id=005228032&type=6 · Note
• https://t.me/cveNotify/142375 · Telegram Post