BodySnatcher Vulnerability Allows Attackers to Impersonate Any ServiceNow User

Cyberpress • January 19, 2026

Share: View original

Security researchers have disclosed a critical vulnerability in ServiceNow's Virtual Agent API and Now Assist AI Agents application, ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BodySnatcher Vulnerability Enables ServiceNow User Impersonation A critical vulnerability named 'BodySnatcher' has been identified in ServiceNow's Virtual Agent API and Now Assist AI Agents application, allowing attackers to impersonate any ServiceNow user. This flaw poses significant risks to organizations using ServiceNow, as it can lead to unauthorized access and manipulation of sensitive data. 2 sources 26

Extracted Entities

Companies (1)

Platforms (2)

Now Assist AI Agents Virtual Agent API

Vulnerabilities (1)