Salesforce Agentforce AI Agent Vulnerability

By Editorial Team | September 30, 2026
Salesforce Agentforce AI agent vulnerability let a web form hijack CRM data with zero clicks. Patched already, but the pattern will repeat elsewhere.

A Salesforce Agentforce AI agent vulnerability, publicly disclosed September 24 by research firm Zenity Labs under the name “SalesBleed,” let an attacker plant a hidden instruction in an ordinary sales lead form and later exfiltrate CRM data with zero clicks, once an employee simply asked their AI agent to look at the newest lead. Salesforce…

Read More