Zenity Labs discovered three security vulnerabilities in the Salesforce Agentforce AI platform.
The SalesBleed flaws allow attackers to steal sensitive CRM data through zero-click exploits.
These vulnerabilities enable the silent exfiltration of enterprise data to external servers without user interaction.
Attackers can also impersonate trusted AI agents to launch sophisticated phishing campaigns against employees and customers.