ForcedLeak (CVE-2025-32731)

ForcedLeak (CVE-2025-32731) — уязвимость класса непрямой инъекции промпта, приводившая к утечке данных CRM через ИИ-агента, обрабатывавшего внешние формы.Определение на английскомA September 2025 indirect prompt injection vulnerability in Salesforce Agentforce disclosed by Noma Security, scored CVSS 9.4. A field on a public web-to-lead form became an injection vector: Agentforce, processing new leads, would read the payload as instructions and exfiltrate CRM data. ForcedLeak is notable because the attack surface was a *public form*—no compromised employee, no phishing—demonstrating that any customer-facing input field an AI agent consumes is a potential injection vector.

Автор: Max Zeshut

Основатель Agentmelt