Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration
Zenity disclosed SalesBleed, a patched Agentforce flaw enabling zero-click CRM theft via prompt injection.
74
Product
Web-to-Lead
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 25, 2026
- Last mentionedSep 25, 2026
Timeline
2 articles · newest firstSalesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection
Zenity's SalesBleed shows a zero-click Agentforce prompt injection that can leak Salesforce CRM data via DNS.
68
Appears with
- Zenity Labsorganization · 2
- Agentforceproduct · 2
- Salesforcevendor · 2
- Salesforceorganization · 1
- Slackproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.