Salesbleed Exploit: How Agentic AI Bridges Salesforce to Slack Phishing
A novel attack vector dubbed 'Salesbleed' demonstrates how agentic AI systems can be manipulated to smuggle malicious instructions across application boundaries. The vulnerability allows threat actors to inject arbitrary commands from public web sources into trusted Salesforce agents, which then propagate those instructions into internal Slack channels — effectively bypassing traditional security perimeters. This research highlights a fundamental architectural weakness in how autonomous AI agents handle cross-application trust, with implications far beyond the Salesforce-Slack integration.
By Gourav Rajput

















