‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Salesforce Agentforce flaws dubbed SalesBleed let poisoned Web-to-Lead forms exfiltrate CRM data and phish via Slack.
Zenity Labs disclosed SalesBleed, three Salesforce Agentforce flaws that could hijack trusted agents through poisoned Web-to-Lead submissions. Two weaknesses in Trusted URL filtering allowed zero-click CRM data exfiltration, including via HTML image tags and Slack link previews, even when Agentforce claimed content was blocked. A third flaw let attackers post phishing messages to internal Slack channels as the agent. Zenity reported the issues on June 1, and Salesforce said all three were fixed by August 19.
- Two flaws bypassed Trusted URL checks for zero-click CRM exfiltration.
- Poisoned Web-to-Lead data executed when employees invoked Agentforce.
- Slack integration could send phishing as the trusted agent.
- Salesforce said all three bugs were fixed by August 19.
- Vendors
- Salesforce
- Products
- AgentforceSlack
- Organizations
- Zenity Labs
From the original article
2 min read at securityweek.com
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks. The post ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.