LLMHigh
CVE-2025-64320: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes…
- Occurred
- Nov 4, 2025
- Published
- Nov 4, 2025
- Source
- NVD CVE
Summary
Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0.
Tags
- CVE
- CVE-2025-64320
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: CVE describes code injection vulnerability in LLM prompting system, enabling unauthorized actions.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8