SNOW-18.2: Yokohama Agent Duplication Sybil
🔴 High · Multi-Agent Orchestration
Detects duplicated AI Agent definitions that share tool references (sn_aia_agent_tool_m2m). In ServiceNow Yokohama Patch 1, duplicating an AI Agent does not decouple the tool mappings — the clone points directly to the original's tools. Modifying tools in one agent silently manipulates all clones, creating a Sybil vulnerability with unintended functional drift.
Details
| Field | Value |
|---|---|
| Rule ID | SNOW-18.2 |
| Severity | High |
| Category | Multi-Agent Orchestration |
| Platforms | servicenow |
| Compliance | NIST_AI_RMF, SOC2_CC7 |
Remediation
Refer to the SquireX documentation for
remediation guidance specific to SNOW-18.2.