LLM Prompt Manipulation in Salesforce Agentforce Vibes Extension

CVE-2025-64321

What is CVE-2025-64321?

The Salesforce Agentforce Vibes Extension is affected by a vulnerability that allows attackers to manipulate writable configuration files through improper neutralization of user input used for LLM prompting. If exploited, this vulnerability could lead to unauthorized changes and impact the integrity of the application's functionality. Users must ensure that they are running version 3.2.0 or later to mitigate this risk.

References