Jan 13, 2026 • Vulnerability | #CVE-2025-12420 #Prompt Injection #ServiceNow AI Platform

ServiceNow patches critical AI platform flaw that could allow user impersonation - CyberScoop

A critical vulnerability, CVE-2025-12420 (CVSS 9.3), was patched in ServiceNow's AI platform, allowing unauthenticated user impersonation and unauthorized ...

Read Analysis →

Jan 13, 2026 • Vulnerability | #CVE-2025-12420 #Unauthenticated Impersonation #MFA/SSO Bypass

ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation - The Hacker News

ServiceNow patched CVE-2025-12420, codenamed BodySnatcher, a critical vulnerability (CVSS 9.3) in its AI Platform that allowed unauthenticated user impersonatio...

Read Analysis →