A critical security vulnerability has been discovered in the Salesforce AgentForce browser extension, which is widely used by customer service teams to enhance productivity. This flaw could allow attackers to access sensitive customer data and internal communications, posing significant risks to organizations relying on Salesforce for their CRM needs. The vulnerability stems from improper handling of permissions and data access controls within the extension, enabling malicious actors to exploit these weaknesses remotely. Salesforce has been alerted and is working on a patch to address the issue promptly. Users of the AgentForce extension are advised to monitor updates closely and implement recommended security measures to mitigate potential exploitation. This incident highlights the ongoing challenges in securing third-party extensions integrated with major platforms and underscores the importance of rigorous security assessments and timely patching to protect enterprise data.
This Cyber News was published on www.infosecurity-magazine.com. Publication date: Thu, 25 Sep 2025 16:05:03 +0000