ForcedLeak AI Agent Vulnerability

~Varonis~
ForcedLeak vulnerability in Salesforce AI agents allows CRM data exfiltration via prompt injection and a misconfigured CSP.
-
IOCs: my-salesforce-cms. com
-
#AIAgent #ForcedLeak #Salesforce #ThreatIntel

ForcedLeak: Indired Prompt Injection en Salesforce AgentForce Blog personal de Chema Alonso ( https://MyPublicInbox.com/ChemaAlonso ): Ciberseguridad, IA, Innovación, Tecnología, Cómics & Cosas Personasles.

ForcedLeak: Indired Prompt Injection en Salesforce AgentForce #ia #seguridad #forcedleak www.elladodelmal.com/2025/09/forc...

ForcedLeak flaw in Salesforce Agentforce exposes CRM data via Prompt Injection Researchers disclosed a critical flaw, named ForcedLeak, in Salesforce Agentforce that enables indirect prompt injecti...

#Breaking #News #Hacking #Security #AI #ForcedLeak […]

[Original post on securityaffairs.com]

Salesforce Agentforce hit by Noma “ForcedLeak” exploit Researchers at Noma have disclosed a prompt-injection vulnerability, named “ForcedLeak,” affecting Salesforce’s Agentforce autonomous AI agents. The flaw allows attackers to embed malicious prompts in web forms, causing the AI agent to exfiltrate sensitive customer relationship management data. The vulnerability targets Agentforce, an AI platform within the Salesforce ecosystem for creating autonomous agents for business […]

Critical Salesforce Vulnerability ‘ForcedLeak’ Exposes AI Agent Risks in AgentForce A recently disclosed security research report has revealed a severe vulnerability chain in Salesforce AgentFo...

#Firewall #Daily #Cyber #News #Vulnerabilities […]

[Original post on thecyberexpress.com]

Critical Salesforce Vulnerability ‘ForcedLeak’ Exposes AI Agent Risks in AgentForce A recently disclosed security research report has revealed a severe vulnerability chain in Salesforce AgentFo...

#Firewall #Daily #Cyber #News #Vulnerabilities […]

[Original post on thecyberexpress.com]

🚨 Vulnérabilité critique ForcedLeak sur Salesforce ! Score CVSS 9.4 - des données sensibles exposées via des prompt injections dans les CRM IA. Découvrez l'analyse complète. #Cybersécurité #Salesforce #IA #ForcedLeak #Vanta lynxintel.io/vulnerabilite-forcedleak...

Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection ForcedLeak flaw in Salesforce Agentforce allows data exfiltration via indirect prompt injection; Salesforce issues patch.

#Salesforce Patches Critical #ForcedLeak Bug Exposing CRM Data via #AI Prompt Injection
thehackernews.com/2025/09/sale...

CVSS score: 9.4 impacts any org using #SalesforceAgentforce with the Web-to-Lead functionality enabled.
#CyberSecurity #InfoSec #Patch #Vulnerability

ForcedLeak Flaw in Salesforce Agentforce AI Agent Exposed CRM Data Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Critical #ForcedLeak flaw in Salesforce’s Agentforce AI agent exposed CRM data to remote attackers.

Read: hackread.com/forcedleak-s...

#CyberSecurity #Salesforce #Agentforce #Vulnerability #AI