CERT24Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer DataLoading data…
CERT24Threat Observatory
Period

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Salesforce disabled the Klue Battlecards app integration following a security incident on June 11, 2026. OAuth tokens were obtained through Klue’s infrastructure and used to access Salesforce data in multiple customer environments. Salesforce said the issue was limited to Klue’s app connection and did not result from a vulnerability in the Salesforce platform.

← Back to intelligence

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Salesforce disabled the Klue Battlecards app integration following a security incident on June 11, 2026. OAuth tokens were obtained through Klue’s infrastructure and used to access Salesforce data in multiple customer environments. Salesforce said the issue was limited to Klue’s app connection and did not result from a vulnerability in the Salesforce platform.