‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Source SecurityWeek
Rated by Threat Radar
Data as of 25 Sep 2026, 09:32 UTC
What to do
AI-suggested
Salesforce confirmed that all three SalesBleed vulnerabilities were fixed by August 19, 2026. Organizations using Salesforce Agentforce should ensure they have applied the official patches or updates released by Salesforce. No additional mitigation actions are required beyond applying these fixes.
Description
Three vulnerabilities in Salesforce Agentforce, collectively dubbed 'SalesBleed,' allowed attackers to hijack trusted agents, exfiltrate sensitive CRM data without user interaction, and conduct phishing attacks via Slack. The flaws exploited weaknesses in the Trusted URLs mechanism and the Agentforce-Slack integration, enabling zero-click data exfiltration and unauthorized message posting. Salesforce confirmed these vulnerabilities were fixed by August 19, 2026.