Which versions of ServiceNow AI Platform are affected by CVE-2026-6875?

Organizations running ServiceNow AI Platform face a critical unauthenticated remote code execution vulnerability that could enable complete system compromise without requiring credentials.

Is there a public PoC exploit available for CVE-2026-6875?

Yes, a public proof-of-concept exploit is available for CVE-2026-6875. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2026-6875?

Within 24 hours: Contact ServiceNow support to confirm patch availability for your deployment model (hosted, self-hosted, or partner-managed) and current platform version. Within 7 days: Apply vendor-released patches; for instances without patches, implement network segmentation to restrict ServiceNow access to essential users only and disable non-critical AI Platform functionality. Within 30 days: Verify complete patch deployment across all ServiceNow instances, conduct access log review for suspicious activity, and confirm all authentication controls are operational.

ServiceNow AI Platform CVE-2026-6875

Q: What is the CVSS score of CVE-2026-6875?

CVE-2026-6875 has a CVSS 4.0 base score of 9.5 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

CRITICAL

Code Injection (CWE-94)

2026-07-13 SN

RCE Code Injection Servicenow Servicenow Ai Platform

9.5

CVSS 4.0 · Vendor: SN

Severity by source

Vendor (SN) PRIMARY

9.5 CRITICAL

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.0 CRITICAL

Unauthenticated network RCE (AV:N/PR:N/UI:N) with attacker-uncontrollable preconditions (AC:H) and impact beyond the vulnerable component (S:C), full C/I/A loss.

3.1 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (SN).

CVSS VectorVendor: SN

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 13, 2026 - 19:28 vuln.today

CVE Published

Jul 13, 2026 - 18:17 cve.org

CRITICAL 9.5

DescriptionCVE.org

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform.

ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners.

Further, the vulnerability is addressed in the listed patches and family releases, which have been made available to hosted and self-hosted customers, as well as partners. We are not currently aware of exploitation against ServiceNow instances.

We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

AnalysisAI

Remote code execution in the ServiceNow AI Platform allows an unauthenticated attacker, under certain (unspecified) circumstances, to execute arbitrary code within the ServiceNow platform, carrying a critical CVSS 4.0 base score of 9.5. ServiceNow has patched hosted instances directly and issued fixes to self-hosted customers and partners; there is no public exploit identified at time of analysis, and the vendor states it is not currently aware of exploitation. The high CVSS complexity metric (AC:H) indicates the exploit is not trivially reproducible against arbitrary instances, tempering the otherwise maximal impact rating.

Technical ContextAI

ServiceNow is a cloud/enterprise SaaS platform for IT service management, workflow automation, and (in this case) AI-driven capabilities delivered via the 'servicenow_ai_platform' component identified by CPE cpe:2.3:a:servicenow:servicenow_ai_platform. The flaw is classified only as RCE via vendor tags; no CWE was assigned (CWE: N/A), so the precise root-cause class (e.g., deserialization, template/expression injection, script API abuse) cannot be confirmed from the available data. ServiceNow's platform historically exposes server-side scripting (Glide APIs), record processing, and now AI-request handling paths that, when reachable pre-authentication, can become code-execution surfaces - consistent with a network-reachable RCE affecting an AI-platform request handler.

RemediationAI

Patch available per vendor advisory: ServiceNow has already deployed the security update to hosted instances (no customer action required for those), and self-hosted customers and partners must apply the relevant patch or upgrade to a fixed family release as listed in KB3137947 - the exact fixed version strings are not provided in this input and should be taken directly from that advisory rather than assumed. Primary action for self-hosted/partner deployments is to promptly apply the appropriate patch or upgrade to the patched family release. Consult and follow https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3137947 for version-specific instructions. As interim compensating controls pending upgrade, restrict network reachability of the instance to trusted networks/VPN and place a WAF or reverse proxy in front of the AI Platform endpoints, and monitor instance logs for anomalous unauthenticated requests to AI-platform paths; note these controls reduce exposure but do not eliminate the flaw and may impact legitimate integrations or external-facing use cases, so they are stopgaps only.