Opening SecureFlowNow Assist: A Ticket Steers One Agent into a Privileged Teammate
Case summary & sources

AIDEFEND SecureFlow / SecureFlow Case Index

AppOmni AO Labs aidefend-sf0072

Now Assist: A Ticket Steers One Agent into a Privileged Teammate

  • Autonomous Agents
  • Data Exfiltration

AppOmni tested ServiceNow Now Assist, which uses AI agents to handle service-management work. A low-privilege user placed instructions in a ticket; when an administrator invoked a categorization agent, that text steered it toward a discoverable record-management agent. The test copied a protected ticket into one the attacker could read. It demonstrates a configured authority boundary, not a vendor-confirmed malicious production breach.

Mapped threat techniques

  • AML.T0051.001 LLM Prompt Injection: Indirect
  • AML.T0085.001 Data from AI Services: AI Agent Tools
  • AML.T0086 Exfiltration via AI Agent Tool Invocation

Source