Salesforce OmniStudio Improper Preservation of Permissions Vulnerability in DataMapper Component

A vulnerability in Salesforce OmniStudio's DataMapper feature allows for the improper preservation of permissions, leading to the exposure of encrypted data. This issue affects OmniStudio versions prior to Spring 2025.

Impact

Exploitation of this vulnerability could result in unauthorized access to encrypted data, potentially allowing sensitive information to be exposed.

Remediation

Customers should review the DataMapper component, verify that users experiencing data access issues have the necessary field-level security and permissions, and update user profiles or permission sets as needed to restore expected data visibility.