AI AgentHigh
SalesBleed: Indirect Prompt Injection and 0-Click Data Exfiltration on Agentforce
- Occurred
- Oct 3, 2026
- Published
- Oct 3, 2026
- Source
- AI Incident Database
Summary
We found a way to pull sensitive account data out of Salesforce Agentforce without ever logging in, or requiring the victim to click anything. The entry point was a public Web-to-Lead form, the exit was a DNS query. We call it SalesBleed. ... (report_number: 8024)
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Indirect prompt injection in an autonomous agent system causing unauthorized data exfiltration.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8