CVE-2025-43701: Salesforce Omnistudio

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data.  This impacts OmniStudio: before version 254.

Affected products

• Salesforce Omnistudio

Published 2025-06-10. Last modified 2026-06-17.