Medium severity5.3NVD Advisory· Published Nov 4, 2025· Updated Jun 17, 2026
CVE-2025-64322
CVE-2025-64322
Description
Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.
Affected products
3<3.3.0+ 1 more
- (no CPE)range: <3.3.0
- (no CPE)range: 0
- cpe:2.3:a:salesforce:agentforce_vibes:*:*:*:*:*:visual_studio_code:*:*Range: <3.3.0
Patches
Vulnerability mechanics
References
1- help.salesforce.com/s/articleViewnvdVendor Advisory
News mentions
0No linked articles in our index yet.