#SaaS Security

Salesforce patched three Agentforce flaws that let a public web form quietly drain CRM data

Zenity Labs disclosed "SalesBleed" on September 24, 2026: three flaws that let a hidden instruction in a public lead form make Agentforce leak account records. Salesforce fixed them in August.