ServiceNow's 'BodySnatcher' Vulnerability: A Wake-Up Call for AI Security
In October 2025, ServiceNow identified and patched a critical vulnerability, CVE-2025-12420, in its AI Platform. Dubbed 'BodySnatcher,' this flaw allowed unauthenticated attackers to impersonate legitimate users, potentially granting unauthorized access to sensitive enterprise data. The vulnerability affected components such as Now Assist AI Agents and the Virtual Agent API, with ServiceNow deploying security updates to hosted instances and providing patches for self-hosted customers. ([techradar.com](https://www.techradar.com/pro/security/servicenow-patches-critical-security-flaw-which-could-allow-user-impersonation?utm_source=openai)) This incident underscores the growing security challenges associated with AI-driven platforms. Organizations are urged to promptly apply security updates and review their AI system configurations to mitigate similar risks. ([techradar.com](https://www.techradar.com/pro/security/servicenow-patches-critical-security-flaw-which-could-allow-user-impersonation?utm_source=openai))
Kill Chain