Agentforce Web-to-Lead Vulnerability Exposed: Could You Be Impacted?
Noma Security researchers disclosed a vulnerability in Salesforce’s Agentforce Web‑to‑Lead feature that allowed malicious prompt‑injection payloads entered in website forms to leak CRM data. The attack used agentic loops to trick the AI agent into exfiltrating sensitive information. Salesforce issued patches and customers are urged to sanitize user inputs and monitor for suspicious activity.
The site uses the cookies it needs to work, such as your sign-in. With your consent it also uses
Google Analytics, to count visits, and Google AdSense, whose ads fund the
extension: both set their own cookies and send your address to Google. Neither runs until you choose, and you
can change your mind at any time from Cookie settings at the foot of every page.
Which cookies, and why.
