Salesforce Agentforce Flaws Enabled Zero-Click CRM Theft

Zenity Labs found three Agentforce flaws, dubbed SalesBleed, that let poisoned leads hijack AI agents to steal CRM data without a click and send anonymous phishing messages. Salesforce fixed the URL redaction bypass and other issues by September 21. The researchers warn any agent reading external records and rendering links shares the same risk.