> BodySnatcher (CVE-2025-12420): A Broken Authentication and Agentic Hijacking Vulnerability in ServiceNow

[SOURCE] Security Boulevard [AUTHOR: Aaron Costello, Chief of Security Research, AppOmni] [DATE: 13/01/2026 12:57] [LANGUAGE: EN]

BodySnatcher (CVE-2025-12420) exposes a critical agentic AI security vulnerability in ServiceNow. Aaron Costello's deep dive analyzes interplay between Virtual Agent API and Now Assist enabled in this exploit.
The post BodySnatcher (CVE-2025-12420): A Broken Authentication and Agentic Hijacking Vulnerability in ServiceNow appeared first on AppOmni.
The post BodySnatcher (CVE-2025-12420): A Broken Authentication and Agentic Hijacking Vulnerability in ServiceNow appeared first on Security Boulevard.

[messages.read_original_source] →