Vulnerability / research

BodySnatcher exposed ServiceNow AI workflows through an authentication flaw

Reported

What happened

AppOmni demonstrated that shared integration secrets and email-based account linking could let an unauthenticated actor impersonate ServiceNow users and invoke privileged AI workflows.

Parties and reporting

AI tools and systems: ServiceNow Virtual Agent API, Now Assist AI Agents, CVE-2025-12420

Outcome

ServiceNow remediated the flaw; AppOmni said cloud-hosted customers needed no action, while self-hosted users needed fixed application versions.

Operating lesson

Bind agent identity to strong authentication and review integrations that can invoke privileged workflows.

Evidence and limits

Date follows the public CVE record; detailed research followed January 13. An October 30 customer/KB notice is mentioned but public accessibility was unverified. No malicious exploitation is established.

Sources