2025-09 · 2025-Q3
Salesforce Agentforce "ForcedLeak"
Layer tags: not yet tagged.
Target
Salesforce Agentforce
Impact
CRM data exfiltrated via indirect prompt injection through Web-to-Lead forms; CVSS 9.4
Root Cause
Indirect prompt injection via user-submitted form data; expired domain still whitelisted in CSP