Microsoft, Salesforce Patch AI Agent Data Leak Flaws

Capsule Security disclosed prompt-injection flaws in Salesforce Agentforce (PipeLeak) and Microsoft Copilot/SharePoint (ShareLeak, CVE-2026-21520) that allow attackers to embed malicious instructions in public form inputs to trigger agents to exfiltrate data; vendors have remediated the issues, and Capsule recommends treating external inputs as untrusted, applying input sanitation and prompt boundaries, disabling email actions for untrusted inputs, requiring human review for CRM emails, and logging agent data access.