Salesforce Agentforce intake can pass public email into agent prompts
Researchers say standard Email-to-Case and Flows can reach agent actions without a misconfiguration.
58
Product
Agentforce
- Mentions · 7d0
- Mentions · 30d1
- All mentions9
- First seenAug 24, 2026
- Last mentioned11d ago
Timeline
9 articles · newest firstZero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
Zenity disclosed patched zero-click prompt-injection flaws in Salesforce Agentforce that could exfiltrate CRM data.
68
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Salesforce Agentforce flaws dubbed SalesBleed let poisoned Web-to-Lead forms exfiltrate CRM data and phish via Slack.
76
Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration
Zenity disclosed SalesBleed, a patched Agentforce flaw enabling zero-click CRM theft via prompt injection.
74
Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection
Zenity's SalesBleed shows a zero-click Agentforce prompt injection that can leak Salesforce CRM data via DNS.
68
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Zenity Labs found Salesforce Agentforce flaws, called SalesBleed, enabling zero-click CRM theft and agent-identity phishing.
77
Salesforce Agentforce: Bridging the Enterprise AI Gap from ‘Vibe Coding’ to Battle-Tested Orchestration
Salesforce pitches Agentforce as an enterprise agent platform with testing, observability, and deterministic gating; Southwest Airlines reports $6M annual savings and 45% autonomous resolution.
30
AI is changing what Salesforce security needs to govern
WithSecure's Trust Mapping paper proposes a framework for governing trust relationships across Salesforce workflows, AI agents, integrations and connected SaaS systems.
25
One in four MCP servers opens AI agent security to code execution risk
Noma Security whitepaper finds most popular AI Skills and many MCP servers carry high-risk capabilities, with state changes most prevalent.
62
Appears with
- Salesforcevendor · 9
- Zenity Labsorganization · 5
- Salesforceorganization · 3
- Slackproduct · 3
- OWASPorganization · 2
- Web-to-Leadproduct · 2
- Salesforceproduct · 2
- ServiceNowproduct · 1
- Customer 360product · 1
- Agentforce Testing Centerproduct · 1
- WithSecurevendor · 1
- Claudeproduct · 1
- Claudeai model · 1
- Cursorvendor · 1
- Noma Securityvendor · 1
- OpenAIorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.