vulnerability
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
High
Summary
A vulnerability in Salesforce's Agentforce platform allowed attackers to steal CRM data through a sophisticated phishing campaign, bypassing traditional security measures. The issue stemmed from a lack of proper input validation, enabling attackers to inject malicious code and exfiltrate sensitive customer information. This highlights a critical weakness in Salesforce's security posture and the ongoing challenge of zero-day exploits.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data