Vulnerability in Salesforce Agentforce Vibes Extension

CVE-2025-64320

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0.

EPSS: 0.000 (15.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References