AppOmni AO Labs
aidefend-sf0072
Now Assist: A Ticket Steers One Agent into a Privileged Teammate
- Autonomous Agents
- Data Exfiltration
AppOmni tested ServiceNow Now Assist, which uses AI agents to handle service-management work. A low-privilege user placed instructions in a ticket; when an administrator invoked a categorization agent, that text steered it toward a discoverable record-management agent. The test copied a protected ticket into one the attacker could read. It demonstrates a configured authority boundary, not a vendor-confirmed malicious production breach.
Mapped threat techniques
AML.T0051.001LLM Prompt Injection: IndirectAML.T0085.001Data from AI Services: AI Agent ToolsAML.T0086Exfiltration via AI Agent Tool Invocation