AGENTFORCE-FLOW-01: System Context Enforcement
🚨 Critical · Privilege Escalation
An agent action calls a Flow that ignores the user's permissions: it runs in system mode without sharing, or it is triggered by a Platform Event and so runs as the Automated Process user. Anyone who can talk to the agent can then read or change records they could not reach themselves.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-FLOW-01 |
| Severity | Critical |
| Category | Privilege Escalation |
| Compliance | SOC2_CC6, NIST_AI_RMF |
Remediation
Set Flow runInMode to CurrentUser or add explicit sharing checks within the Flow.