CVE-2025-64322: Medium severity Salesforce Agentforce Vibes Extension vulnerability
Published Nov 4, 2025
·Updated
Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.
Affected Software
2 affected components
Salesforce Agentforce Vibes Extension<3.3.0
Salesforce Agentforce Vibes Visual Studio Code<3.3.0
Event History
Nov 4, 2025
CVE Published
via MITRE·06:33 PM
Data Sourced
via MITRE·06:33 PM
DescriptionWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-64322?
CVE-2025-64322 is considered a critical vulnerability due to its impact on writable configuration files.
2
How do I fix CVE-2025-64322?
To mitigate CVE-2025-64322, upgrade to version 3.2.0 or higher of the Salesforce Agentforce Vibes Extension.
3
What are the potential impacts of CVE-2025-64322?
Exploitation of CVE-2025-64322 can lead to unauthorized manipulation of critical configuration files.
4
Which versions of Salesforce Agentforce Vibes Extension are affected by CVE-2025-64322?
CVE-2025-64322 affects all versions of Salesforce Agentforce Vibes Extension prior to 3.2.0.
5
Who is the vendor for CVE-2025-64322?
The vendor for CVE-2025-64322 is Salesforce, specifically for the Agentforce Vibes Extension product.