AGENTFORCE-25.7: Model-Controlled Query or Index Injection
🔴 High · Injection
Detects agent action inputs (@InvocableVariable / invocable parameters) concatenated into Data Cloud SQL (ConnectApi.CdpQuery, query API bodies), vector / hybrid search index names, or SOSL without binding, escaping or an allowlist, so the model (or a prompt injection) chooses the table, index or filter.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-25.7 |
| Severity | High |
| Category | Injection |
| Compliance | EU_AI_ACT_HIGH_RISK, SOC2_CC7 |
Remediation
Do not take index, table or field names from action inputs: map an input choice to a fixed name from an allowlist (Set.contains) and reject anything else. Pass values as bind parameters, or escape them with String.escapeSingleQuotes inside quotes.