AppOmni BodySnatcher ServiceNow AI Agent Privilege Escalation
Date: 2025-10
Affected: ServiceNow AI Agent
Attack vector: tool-abuse
Category: research
Severity: Critical

AppOmni Labs disclosed BodySnatcher: with only target's email address, attacker impersonates admin and executes ServiceNow AI agent to override security controls and create backdoor admin accounts. Patched by ServiceNow.


Mitigations:

Architectural layers (MAESTRO):