{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/appomni-servicenow-agent-discovery-injection-2025/",
 "asOf": "2026-09-26",
 "id": "appomni-servicenow-agent-discovery-injection-2025",
 "date": "2025-11-19",
 "datePrecision": "day",
 "title": "AppOmni shows second-order prompt injection recruiting privileged ServiceNow Now Assist agents",
 "lane": "attack",
 "kind": "vulnerability-disclosure",
 "summary": "AppOmni reports that instructions planted in an ordinary ServiceNow record could cause a low-privilege Now Assist agent to discover and task a more privileged agent, leading to record changes, data access and email exfiltration. The behavior follows default settings that group agents into teams and make them discoverable; ServiceNow called it intended and updated its documentation.",
 "whyItMatters": "It is a concrete agent-to-agent escalation where the risk lives in default configuration rather than a code bug.",
 "actors": [
  "appomni",
  "servicenow"
 ],
 "topics": [
  "multi-agent-security",
  "prompt-injection"
 ],
 "atlas": [
  "other-agents",
  "untrusted-content",
  "tools"
 ],
 "artifacts": [],
 "sources": [
  {
   "url": "https://appomni.com/ao-labs/ai-agent-to-agent-discovery-prompt-injection/",
   "publisher": "AppOmni",
   "title": "When AI Turns on Its Team: Exploiting Agent-to-Agent Discovery via Prompt Injection",
   "date": "2025-11-19",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "Three defaults enable the chain: LLM support for agent discovery, automatic team grouping, and discoverable-by-default publishing.",
   "locator": "Default configuration section"
  },
  {
   "fact": "AppOmni recommends supervised execution for privileged agents and team segmentation.",
   "locator": "Mitigations"
  }
 ],
 "significance": 3,
 "fideQuestions": [
  "FID-087"
 ],
 "methods": [
  "agent-data-exfiltration",
  "indirect-prompt-injection"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}