SNOW-3.1: Grounding Source Without Classification
๐ด High ยท ServiceNow Grounding Security
Detects AI Search grounding sources and RAG configurations that lack data classification guards. Unclassified grounding sources can inject sensitive data or malicious content into the agent's context window.
Detailsโ
| Field | Value |
|---|---|
| Rule ID | SNOW-3.1 |
| Severity | High |
| Category | ServiceNow Grounding Security |
| Platforms | servicenow |
Remediationโ
Refer to the SquireX documentation for
remediation guidance specific to SNOW-3.1.