Salesforce Patches CRM Data Exfiltration Vulnerability

Salesforce patched a vulnerability involving its Agentforce agentic artificial intelligence tool that would have allowed attackers to steal customer data and leads being stored in the CRM system.

A report from AI security platform vendor Noma Labs details a chain of indirect prompt injection vulnerabilities it discovered and dubbed ForcedLeak. Researchers reported the flaw to the CRM giant on July 28, calculating that it would have a CVSS-equivalent score of 9.4.

https://www.bankinfosecurity.com/salesforce-patches-crm-data-exfiltration-vulnerability-a-29578