Researchers documented a security issue in Salesforce Agentforce, where unauthenticated outsiders can access internal agent instructions and respond to customer cases through Email-to-Case and Web-to-Case features.
The vulnerability or weakness
The vulnerability stems from the chaining of Email-to-Case and Web-to-Case features, allowing unauthenticated users to interact with internal agent prompts and case records.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
This exposure can lead to data breaches, unauthorized access, and potential misuse of customer support interactions, impacting operational security and legal compliance.
Industries affected
Aerospace, hospitality, and any industry utilizing Salesforce for customer support are affected.
Users affected
Customers and businesses using Salesforce for support may have their interactions exposed, compromising privacy and security.
