Salesforce Agentforce Email-to-Case and Flow chain gives unauthenticated outsiders a path into internal agent prompts
Researchers documented in August 2026 that standard, as-designed Salesforce Agentforce features can be chained so an unauthenticated outsider reaches an internal agent's instructions. Email-to-Case and Web-to-Case turn inbound messages into case records, and a Flow passes that data into the agent prompt. The agent's reply then leaves thro…