SNOW-14.1: Virtual Agent Topic Without Input Sanitization

🔴 High · ServiceNow Virtual Agent

Detects Virtual Agent topics (sys_cs_topic), utterances, and topic-block scripts that process user input without sanitization. Topic-block scripts are a major prompt injection vector in conversational AI deployments.

Details

Field	Value
Rule ID	SNOW-14.1
Severity	High
Category	ServiceNow Virtual Agent
Platforms	servicenow

Remediation

Refer to the SquireX documentation for remediation guidance specific to SNOW-14.1.

See Also

• Rule catalog index
• SquireX scan documentation