ServiceNow AI Platform CVE-2026-6875

Exploitation requires network access to a ServiceNow AI Platform instance and, per the vendor, only succeeds 'in certain circumstances' - the CVSS AC:H metric confirms attacker-uncontrollable preconditions must be met, though the description does not name the exact feature, configuration flag, or instance state that enables it (this specific prerequisite is UNKNOWN from the available data and should be confirmed via KB3137947). No authentication is required (CVSS PR:N → unauthenticated) and no user interaction is needed (UI:N). Limiting factors: hosted instances are already remediated by ServiceNow and are not exploitable, so realistic exposure is concentrated in un-patched self-hosted/partner deployments; the AC:H condition means opportunistic mass exploitation is unlikely without knowledge of the triggering circumstance.

Signals are mostly aligned toward high priority but with one important nuance. The CVSS 4.0 vector (AV:N/AC:H/AT:N/PR:N/UI:N) shows a network-reachable, unauthenticated, no-user-interaction flaw with full vulnerable- and subsequent-system impact (VC/VI/VA and SC/SI/SA all High), yielding 9.5 Critical - the SC/SI/SA High values indicate impact propagates beyond the initially vulnerable component. The single mitigating metric is AC:H: exploitation depends on conditions the attacker cannot fully control ('in certain circumstances'), which is why this is not a straightforward point-and-click bug. No EPSS score is provided, so probabilistic exploitation likelihood cannot be quantified. It is NOT in CISA KEV and the vendor reports no known exploitation; no public POC is identified. There is no SSVC decision data supplied. Net: treat as a high-priority patch given unauthenticated network RCE and cross-system impact, but AC:H and the absence of any exploit evidence suggest this is a patch-promptly rather than emergency-drop-everything situation for most defenders - with the caveat that hosted instances are already fixed by ServiceNow.

An attacker who can reach a vulnerable self-hosted ServiceNow AI Platform instance over the network sends a specially crafted request to an AI-platform handler that, under the right instance state or configuration, triggers server-side code execution without any authentication. Because the impact spans the vulnerable and subsequent systems, successful exploitation could lead to full compromise of platform data and workflows. No public POC or active exploitation is known, and the AC:H rating implies the attacker must satisfy specific 'certain circumstances' to succeed.