CVE-2025-12420
Named by 3 kept items in this workspace.
Search every workspace for CVE-2025-12420. It matches the name as written, so it can find other things that share it.
The items that name it 3
Agentic hijacking vulnerability ('BodySnatcher') in ServiceNow's Virtual Agent API and Now Assist AI Agents application. A hardcoded, platform-wide Message Auth secret combined with account-linking logic that trusted only an email address allowed unauthenticated attackers to impersonate any ServiceN
Critical flaw in ServiceNow AI Platform allowing an unauthenticated user to impersonate another user and perform arbitrary actions as that user; codenamed BodySnatcher by AppOmni.
All cves in this workspace.