AI Prompt Injection Vulnerability

Security researchers demonstrated a prompt injection attack against an AI agent built on Microsoft Copilot Studio, enabling it to reveal private knowledge and complete Salesforce CRM records without human verification. Although Microsoft patched the specific vulnerability, Zenity warns that thousands of public-facing AI agents remain susceptible to similar "agent aijacking" attacks.

What Happened

Security researchers demonstrated a prompt injection attack against an AI agent built on Microsoft Copilot Studio, enabling it to reveal private knowledge and complete Salesforce CRM records without human verification. Although Microsoft patched the specific vulnerability, Zenity warns that thousands of public-facing AI agents remain susceptible to similar "agent aijacking" attacks.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

Timeline

• Incident first seen
  Aug 18, 2025 05:30

  BugSkan first recorded this incident.

• A Customer Service AI Agent Spits Out Complete Salesforce Records in an Attack by Security Researchers - CX Today
  Aug 18, 2025 05:30

  cxtoday.com · Research

Sources

My AI Stack Match