Overview
Noma Labs discovered the ForcedLeak AI agent vulnerability chain which allows external attackers to exfiltrate sensitive CRM data through an indirect prompt injection attack, using a whitelisted domain that cost $5.
Impact
This agentic vulnerability extends far beyond simple data theft. Attackers can manipulate CRM records, establish persistent access, and target any organization using AI-integrated business tools.
The first zero-click vulnerability capable of
running destructive actions
ForcedLeak attack path
Watch: Straight from Noma Labs
Learn how the Noma Labs research team was able to exfiltrate sensitive data from Salesforce Agentforce.
Table of Contents
.jpg)
