CERT24SalesBleed flaws in Salesforce Agentforce enabled user-interaction-free data theft
According to Zenity Labs, three vulnerabilities in Salesforce Agentforce could have allowed attackers to hijack trusted agents to exfiltrate sensitive CRM data and distribute phishing messages. The flaws could be exploited through Salesforce Web-to-Lead forms. Salesforce confirmed that all three bugs had been addressed by August 19.