CNNVD-202511-137 Information

CNNVD ID

CNNVD-202511-137

CVE-2025-64322

  • CNNVD Published: 2025-11-04

Description (Chinese)

Salesforce Agentforce Vibes Extension是美国Salesforce公司的一个AI编码代理扩展。 Salesforce Agentforce Vibes Extension 3.2.0之前版本存在安全漏洞,该漏洞源于关键资源权限分配不当,可能导致可写配置文件被篡改。

Description (English)

Salesforce Agentforce Vibes Extension is an AI-coded agent for Salesforce in the United States. There was a security loophole in previous editions of Salesforce Agentforce Vibes Extension 3.2.0 which stemmed from the misallocation of critical resource authority, which could lead to tampering with a written configuration.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

Salesforce

Published

2025-11-04

Last Modified

2026-02-24

References

https://help.salesforce.com/s/articleView?id=005228032&type=1

Patch

https://help.salesforce.com/s/articleView?id=005228032&type=1

Share on: