ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts

Researchers have identified that ServiceNow's Now Assist generative AI platform is vulnerable to prompt injection attacks, particularly through its default configurations. Exploiting the platform's agent-to-agent discovery feature, malicious actors can perform second-order prompt injections, allowing them to execute unauthorized actions such as copying and exfiltrating sensitive data.