CVE-2025-43698: Salesforce Omnistudio

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025

Affected products

• Salesforce Omnistudio

Published 2025-06-10. Last modified 2026-06-17.