SNOW-28.1: ACL Script Using GlideRecord (Recursive Bypass)

🚨 Critical · ServiceNow ACL

Detects GlideRecord usage in ACL scripts and agent-facing tool scripts. GlideRecord bypasses ACL checks entirely. In ACL scripts this creates a recursive bypass; in agent tools it grants unrestricted database access regardless of Role Masking.

Details

Field	Value
Rule ID	SNOW-28.1
Severity	Critical
Category	ServiceNow ACL
Platforms	servicenow
Compliance	SOC2_CC6, NIST_AI_RMF

Remediation

Refer to the SquireX documentation for remediation guidance specific to SNOW-28.1.

See Also

• Rule catalog index
• SquireX scan documentation