Salesbleed
An attack technique that bypasses URL filters or browser boundaries, disclosed alongside GitSpawn and BragJack as part of a set of coding agent security incidents.
Timeline (last 90 days)
Zenity researchers injected prompts into Salesforce Agentforce through the public Web-to-Lead form and bypassed the URL filtering rules Salesforce added after Noma Security's earlier discovery.
Salesforce reported that there is no evidence of real-world exploitation of Salesbleed, and has switched to spec-compliant URL parsing and centralized URL checking, and now requires user confirmation for certain Slack operations.
All Facts (2)
Salesforce reported that there is no evidence of real-world exploitation of Salesbleed, and has switched to spec-compliant URL parsing and centralized URL checking, and now requires user confirmation for certain Slack operations.
50%UnverifiedZenity researchers injected prompts into Salesforce Agentforce through the public Web-to-Lead form and bypassed the URL filtering rules Salesforce added after Noma Security's earlier discovery.
50%