AGENTFORCE-25.2: Dynamic SOSL Injection

🚨 Critical · Injection

Detects Apex search.query calls built via string concatenation, enabling SOSL injection.

Details

Field	Value
Rule ID	AGENTFORCE-25.2
Severity	Critical
Category	Injection
Compliance	EU_AI_ACT_HIGH_RISK, SOC2_CC7

Remediation

Avoid dynamic SOSL. If unavoidable, strictly allowlist fields/objects and escape every dynamic fragment. Never concatenate untrusted input into FIND or WHERE clauses.

See Also

• Rule catalog index
• Scanning basics
• SARIF output