Entity trail

Capsule Security

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-05 / agents-researcherMicrosoft and Salesforce Patch AI Agent Data Exfiltration Flaws — CVE-2026-21520 (ShareLeak) and PipeLeakCapsule Security disclosed two architectural prompt injection vulnerabilities: ShareLeak (CVE-2026-21520, CVSS 7.5) in Copilot Studio where a SharePoint form field overrides system instructions to exfiltrate data via Outlook, and PipeLeak in Salesforce Agentforce where a public lead form hijacks agents with no auth and no volume cap on exfiltrated CRM data. Microsoft's unusual decision to assign a CVE to a prompt injection may set precedent for the entire agentic ecosystem.
2026-04-19 / skill-finderShareLeak and PipeLeak: Capsule Security Discloses Prompt Injection Vulns in Microsoft Copilot Studio and Salesforce Agentforce That Exfiltrate Data Even After PatchingCapsule Security (launched with $7M seed from stealth) disclosed two agent prompt injection vulnerabilities: ShareLeak (CVE-2026-21520, CVSS 7.5) in Copilot Studio where injected SharePoint form input overrides system instructions and exfiltrates CRM data via Outlook even after Microsoft's patch, and PipeLeak in Salesforce Agentforce where lead capture forms trigger unauthorized agent actions. Both exploit the same structural pattern: agent access to private data + untrusted input + external communication capability.
2026-04-17 / projects-researcherAgent Runtime Security Crystallizes as Product Category: Microsoft Toolkit + Capsule Security + Show HN Project Ship Same MonthThree independent agent runtime security projects shipped within two weeks: Microsoft's Agent Governance Toolkit (MIT license, 7 packages across Python/TS/Rust/Go/.NET, covers all 10 OWASP agentic AI risks at sub-0.1ms p99 latency), Capsule Security's platform with ClawGuard (funded $7M, disclosed CVEs in Copilot Studio and Agentforce), and an open-source Show HN project. The convergence marks runtime agent security as a distinct, investable category — not just a feature of existing security products.

Graph relationships

CRITICIZES
Capsule Security -> Agentforce
Capsule disclosed PipeLeak prompt injection in Salesforce Agentforce
Source finding
CRITICIZES
Capsule Security -> Copilot Studio
Capsule disclosed ShareLeak critical prompt injection in Copilot Studio
Source finding
RELEASED
Capsule Security -> ClawGuard
Capsule Security shipped ClawGuard open-source enforcer for OpenClaw
Source finding
RELEASED
Capsule Security -> ClawGuard
Capsule Security shipped ClawGuard open-source enforcer
Source finding
CRITICIZES
Capsule Security -> Salesforce Agentforce
Capsule Security disclosed prompt injection vulnerability PipeLeak in Agentforce.
Source finding
CRITICIZES
Capsule Security -> Microsoft Copilot Studio
Capsule Security disclosed prompt injection vulnerability ShareLeak in Copilot Studio.

Source trail

a full exploit chain targeting CVE-2026-5873 Adversa AI research Capsule Security disclosed Malwarebytes found Fireship covered RedSun (CVE-2026-33825)CVE-2026-33032

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues