CVE-2025-9844

Description

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6.

PUBLISHED Reserved 2025-09-02 | Published 2025-09-23 | Updated 2025-09-24 | Assigner Salesforce

Problem types

CWE-427 Uncontrolled Search Path Element

Product status

Credits

crispr xiang finder

References

help.salesforce.com/s/articleView?id=005224301&type=1

cve.org (CVE-2025-9844)

nvd.nist.gov (CVE-2025-9844)

Download JSON