Salesforce OmniStudio Improper Preservation of Permissions Vulnerability Allowing Exposure of Encrypted Data

A vulnerability exists in Salesforce OmniStudio (FlexCards) due to improper preservation of permissions, which can lead to the exposure of encrypted data. This issue affects OmniStudio versions prior to Spring 2025.

Impact

Exploitation of this vulnerability could result in unauthorized access to encrypted data, potentially leading to data exposure or misuse.

Remediation

Customers are advised to review the affected components (Flexcards and Data Mappers), verify that users with data access issues have the necessary field-level security and permissions, and update user profiles or permission sets as needed to restore expected data visibility.