SNOW-2.1: Unsafe Script Pattern in Agent Tool

🚨 Critical · ServiceNow Script Safety

Detects unsafe scripting patterns in agent-accessible Script Includes and Script Tools. Patterns include eval(), GlideEvaluator, Packages.java, GlideSystemScript, and direct SQL via GlideDBQuery — all of which can be exploited through prompt injection to achieve remote code execution.

Details

Field	Value
Rule ID	SNOW-2.1
Severity	Critical
Category	ServiceNow Script Safety
Platforms	servicenow

Remediation

Refer to the SquireX documentation for remediation guidance specific to SNOW-2.1.

See Also

• Rule catalog index
• SquireX scan documentation