2025-11 · 2025-Q4
ServiceNow Now Assist Second-Order Prompt Injection
Who actually said "do this"?
- Fixable
- Architectural
- Vendor response
- Not a vulnerability
- In the wild
- No
- Actor
- Attacker
Target
ServiceNow Now Assist / Agentforce
Impact
Low-privilege agent tricks higher-privilege agent into exporting case files to external URL; ServiceNow said system "works as intended"
Root cause
Default agent configs allow autonomous overrides; agents run with initiating user privilege
Sources
Catalog
Cite this: AgentProv incident record: ServiceNow Now Assist Second-Order Prompt Injection (2025-11). https://agentprov.com/incidents/2025-11-servicenow-now-assist-second-order-prompt-injection
Related
- Also L2 · 2026-10-15Datadog: Counterfeit Policy Text Collapses an Injection Classifier's Recall and Pushes a LangChain Risk Gate Under Its Block ThresholdL2Instruction
- Also L2 · 2026-10-08Cisco Talos: Four Malware Families Carry Instructions Aimed at the LLMs That Triage ThemL2Instruction
- Also L2 · 2026-10-07Barracuda: Phishing Emails Carry Hidden Prompt Injections for the Recipient's AI Inbox AssistantL2Instruction