{"slug": "salesforce-vulnerabilities-expose-crm-data-to-zero-click-attacks", "title": "Salesforce Vulnerabilities Expose CRM Data to Zero-Click Attacks", "summary": "Security researchers disclosed three vulnerabilities in Salesforce Agentforce, collectively named SalesBleed, that allowed attackers to hijack AI agents, steal sensitive CRM data, and send phishing messages with zero clicks from a victim. One expert framed the flaws as a lesson in what it takes to keep AI agents contained.", "body_md": "Meet SalesBleed, a trio of security flaws in Salesforce Agentforce that allowed hackers to hijack AI agents, steal sensitive CRM data, and send phishing messages - all without a single click. These vulnerabilities exposed the power of unchecked AI, as one expert warned: it's a lesson in what it takes to keep AI agents contained.", "url": "https://wpnews.pro/news/salesforce-vulnerabilities-expose-crm-data-to-zero-click-attacks", "canonical_source": "https://osintsights.com/salesforce-vulnerabilities-expose-crm-data-to-zero-click-attacks", "published_at": "2026-09-24 19:49:34+00:00", "updated_at": "2026-09-24 20:01:48.880343+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "ai-products", "artificial-intelligence"], "entities": ["Salesforce", "Agentforce", "SalesBleed"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/salesforce-vulnerabilities-expose-crm-data-to-zero-click-attacks", "markdown": "https://wpnews.pro/news/salesforce-vulnerabilities-expose-crm-data-to-zero-click-attacks.md", "text": "https://wpnews.pro/news/salesforce-vulnerabilities-expose-crm-data-to-zero-click-attacks.txt", "jsonld": "https://wpnews.pro/news/salesforce-vulnerabilities-expose-crm-data-to-zero-click-attacks.jsonld"}}