⬇ Download holy card: ·
Saint BodySnatcher, Thief of Identities
Patron of over-privileged AI agents and everyone whose email is on the company website.
Life
Described by AppOmni in January 2026, he lived in the integration between ServiceNow's Virtual Agent and its AI agents. Without logging in, an attacker could pose as any user, admins included: according to the researchers, knowing their email address was enough. Then they could politely ask the AI agents to work for them.
Prayer
O Saint BodySnatcher, who wears other people's identities like a cloak, let our AI agents always ask: 'is it really you?'. Amen.
How to celebrate
Celebrated by updating the ServiceNow apps and cutting AI agents' permissions down to an intern's.
An agent that obeys everyone serves no one.