GoKawiilResearchers Detail 'Salesbleed' Flaws in Salesforce Agentforce Enabling Slack Phishing
Security firm Zenity disclosed three vulnerabilities, collectively named 'Salesbleed,' in Salesforce's Agentforce AI platform. The flaws let attackers plant malicious prompts inside Web-to-lead forms, which AI agents then process, allowing gradual extraction of internal data and, when combined with normal Agentforce workflows, the ability to send phishing messages to employees through their trusted Slack channels.