Agentforce Took Orders From a Sales Lead Form and Started Leaking CRM Data
Ourtake
The agent treated a stranger's form submission as instructions. Plenty of sales reps do the same, but they at least get paid for it.
What happened
Zenity Labs disclosed 'SalesBleed', a set of zero-click vulnerabilities in Salesforce Agentforce. Attackers could plant hidden prompt injections in public Web-to-Lead forms, which could make agents leak CRM data via DNS exfiltration that evaded URL redaction. Salesforce fully fixed the issue on August 18 after Zenity reported it in June.