EUVD-2026-67219
GHSA-pc3p-j9w8-jrpg
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network code injection with full impact and access to data beyond intended scope justifies S:C and C/I/A:H; AC:L per vendor metrics though 'certain circumstances' hints at a possible precondition.
Primary rating from Vendor (SN).
CVSS VectorVendor: SN
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond what was intended.
ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances.
We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
AnalysisAI
Remote code execution in the ServiceNow AI Platform lets an unauthenticated attacker, under certain unspecified circumstances, inject and run arbitrary code within a ServiceNow instance and read or modify instance data beyond intended authorization boundaries. ServiceNow rates it CVSS 4.0 10.0 (maximum) with a fully unauthenticated network vector and total confidentiality, integrity, and availability impact including subsequent-system impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The CVSS metrics (AV:N/AC:L/AT:N/PR:N/UI:N) describe unauthenticated, no-interaction, low-complexity network exploitation against the ServiceNow AI Platform, but the vendor explicitly limits this to 'certain circumstances' that it does not name - meaning a specific, undisclosed feature state, configuration, or deployment mode of the AI Platform is likely required rather than every default instance being trivially exploitable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Every static signal points to top-tier priority: CVSS 4.0 is 10.0 with AV:N/AC:L/AT:N/PR:N/UI:N and high impact across both the vulnerable system (VC:H/VI:H/VA:H) and subsequent systems (SC:H/SI:H/SA:H), indicating unauthenticated, low-complexity, no-interaction network exploitation with full compromise and cross-boundary impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who can reach an internet-exposed ServiceNow AI Platform instance sends a crafted request to a vulnerable AI Platform feature, injecting code that the platform evaluates server-side. Because no authentication or user interaction is required (PR:N/UI:N), the injected code executes in the instance context, letting the attacker read or alter instance data beyond intended limits. … |
| Remediation | Patch available per vendor advisory: ServiceNow has already deployed the fix to hosted instances and made the update available to partners and self-hosted customers, so administrators of self-managed or partner-managed instances should promptly apply the appropriate update or upgrade to a patched release per ServiceNow KB3152242 (https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3152242); an exact fixed version string is not provided in the input and should be confirmed against your instance in that advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately identify and inventory all ServiceNow AI Platform instances in your environment and assess their internet exposure and business criticality. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Servicenow Ai Platform
View allRemote code execution in the ServiceNow AI Platform allows an unauthenticated attacker, under certain (unspecified) circ
SQL injection in the ServiceNow AI Platform allows an unauthenticated attacker, under certain conditions, to execute arb
Improper access control in the ServiceNow AI Platform allows an unauthenticated user, under certain circumstances, to cr
Share
External POC / Exploit Code
Leaving vuln.today