CVE-2025-43699 | Salesforce OmniStudio 254/up to 253/up to Spring 2025 FlexCards permissions

A vulnerability was found in Salesforce OmniStudio 254/up to 253/up to Spring 2025. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component FlexCards. The manipulation leads to preservation of permissions.

This vulnerability is known as CVE-2025-43699. The attack needs to be approached within the local network. There is no exploit available.

It is recommended to upgrade the affected component.