Last seen January 15, 2026

ServiceNow Prompt Injection Vulnerability

A critical vulnerability, CVE-2025-12420 (CVSS 9.3), was patched in ServiceNow's AI platform, allowing unauthenticated user impersonation and unauthorized actions. Furthermore, researchers identified that default configurations in Now Assist AI Agents could facilitate "second-order prompt injection" attacks, enabling low-privileged users to exploit inter-agent communication for data access and privilege escalation.

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

A critical vulnerability, CVE-2025-12420 (CVSS 9.3), was patched in ServiceNow's AI platform, allowing unauthenticated user impersonation and unauthorized actions. Furthermore, researchers identified that default configurations in Now Assist AI Agents could facilitate "second-order prompt injection" attacks, enabling low-privileged users to exploit inter-agent communication for data access and privilege escalation.

Why This Matters

Publisher reporting describes a concrete security event. BugSkan could not yet bind it to a CVE or affected version, so treat the source details as the current record.

Recommended Action

Read the linked source. Identify named vendors, products, or environments and check whether they overlap with yours. Do not wait for a CVE if the report already describes exploitation or a vendor response.

Exposure

My AI Stack Exposure

Exposure unknown

Recommended Response
Last Seen

Jan 15, 2026 05:30

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

AI AgentsPrompt InjectionServiceNowcvss

Timeline

  • Incident first seen
    Jan 13, 2026 05:30

    BugSkan first recorded this incident.

  • ServiceNow patches critical AI platform flaw that could allow user impersonation - CyberScoop
    Jan 13, 2026 05:30

    cyberscoop.com · Vulnerability

  • ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation - The Hacker News
    Jan 13, 2026 05:30

    thehackernews.com · Vulnerability

  • ServiceNow patches critical AI Platform vulnerability enabling user impersonation - SC Media
    Jan 15, 2026 05:30

    scworld.com · Vulnerability

  • Latest observed development
    Jan 15, 2026 05:30

    Most recent source or update associated with this incident.

Sources

ServiceNow patches critical AI platform flaw that could allow user impersonation - CyberScoop

cyberscoop.com · Jan 13, 2026 05:30

A critical vulnerability, CVE-2025-12420 (CVSS 9.3), was patched in ServiceNow's AI platform, allowing unauthenticated user impersonation and unauthorized actions. Furthermore, researchers identified that default configurations in Now Assist AI Agents could facilitate "second-order prompt injection" attacks, enabling low-privileged users to exploit inter-agent communication for data access and privilege escalation.

Open publisher source
ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation - The Hacker News

thehackernews.com · Jan 13, 2026 05:30

ServiceNow patched CVE-2025-12420, codenamed BodySnatcher, a critical vulnerability (CVSS 9.3) in its AI Platform that allowed unauthenticated user impersonation. This flaw enabled attackers to bypass MFA/SSO by chaining a hardcoded secret with email-based account linking, facilitating arbitrary actions and potential privilege escalation.

Open publisher source
ServiceNow patches critical AI Platform vulnerability enabling user impersonation - SC Media

scworld.com · Jan 15, 2026 05:30

ServiceNow has patched CVE-2025-12420, dubbed "BodySnatcher," a critical AI Platform vulnerability with a CVSS score of 9.3. This flaw allowed unauthenticated attackers to impersonate users and execute arbitrary actions within affected Now Assist AI Agents and Virtual Agent APIs.

Open publisher source

My AI Stack Match

Want personalized relevance?

Create an account to see which incidents overlap with your AI stack.

← Back to incident intelligence