Medium severity6.5NVD Advisory· Published Nov 4, 2025· Updated Jun 17, 2026
CVE-2025-64320
CVE-2025-64320
Description
Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0.
Affected products
3- cpe:2.3:a:salesforce:agentforce_vibes:*:*:*:*:*:visual_studio_code:*:*Range: <3.2.0
<3.2.0+ 1 more
- (no CPE)range: <3.2.0
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- help.salesforce.com/s/articleViewnvdVendor Advisory
News mentions
0No linked articles in our index yet.