AI-generated analysis, not investment advice. The articles are written by AI, edited, and checked against company filings — but the judgements are opinions and the figures go stale. How this is made · Terms

⚠ Agents That Can Be HijackedModerate threat

Salesforce (CRM) — threat to the moat

Agents that can read and act on customer records are a new route for that data to leak, and researchers reported three Agentforce flaws in September 2026.

Putting agents on top of the customer record makes the record more useful and more exposed. In September 2026 a security firm, Zenity Labs, said it had found three flaws in Agentforce "Enabling Zero-Click CRM Data Theft and AI Agent Impersonation"1. That is a third party's claim, reported in a press release, not a finding in Salesforce's filings.

Agentforce exposure, September 2026Agentforce flaws reported by Zenity Labs3Data 360 records ingested in Q2 FY2027104 trillionAgentic work units in Q2 FY20273.2 billionAgentforce deals closed by FYE 202629,000stockanalysis news (Zenity Labs release); Salesforce Q4 FY2026 and Q2 FY2027 releases
More data reached by more agents.

Salesforce's own filings acknowledge the general risk. Its release lists "our ability to maintain sufficient security levels and service performance, avoid downtime and prevent, detect and remediate performance degradation and security breaches" among the uncertainties2. The trust layer it describes, built into the platform "to help customers safely use their data and set guardrails on what AI agents do with that data"3, is the company's answer.

The moat depends on trust as much as on switching costs. A customer whose data is exposed by an agent will hesitate before giving agents more access, which is what the whole strategy requires.

The signal would be a disclosed incident. If Salesforce reports a material security breach involving Agentforce, the adoption of the agent layer will slow at exactly the point the company is counting on it.

References
  1. Third-party estimateIn September 2026 a security firm, Zenity Labs, said it had found three flaws in Agentforce "Enabling Zero-Click CRM Data Theft and AI Agent Impersonation".
    stockanalysis.com, Salesforce quote page, close of 2 October 2026: price $234.69, market value $193.15bn, trailing P/E 21.75, forward P/E 16.00, dividend $1.76 (0.75%), 52-week range $146.32-$269.11, IPO June 23, 2004. — October 2026 · publ. 2 October 2026 · source ↗
  2. ReportedIts release lists "our ability to maintain sufficient security levels and service performance, avoid downtime and prevent, detect and remediate performance degradation and security breaches" among the uncertainties.
    Salesforce second-quarter fiscal 2027 results release, Form 8-K exhibit 99.1 - revenue, margins, EPS, RPO, AI metrics, the two new revenue categories, balance sheet and fiscal 2027 guidance - highlights, income statement, revenue categories and margins. — Q2 FY2027 · publ. 26 August 2026 · source ↗
  3. ReportedThe trust layer it describes, built into the platform "to help customers safely use their data and set guardrails on what AI agents do with that data", is the company's answer.
    Salesforce Form 10-K for fiscal 2026 (year ended 31 January 2026) - Item 1 business: service offerings, partners, AppExchange and Hyperforce. — FY2026 · publ. 2 March 2026 · source ↗
Sources
Generated October 4, 2026