Servicenow Ai Platform
Monthly
Sandbox escape in the ServiceNow AI Platform lets an authenticated user holding the admin role bypass Rhino JavaScript sandbox restrictions and execute arbitrary code on the underlying host operating system, with potential for further unintended access. The flaw is rated 9.4 under CVSS 4.0 and maps to CWE-284 (improper access control), and because the privilege prerequisite (PR:H) is an admin session, the practical threat model is a privileged insider or an attacker who has already compromised an admin account rather than an unauthenticated remote adversary; no user interaction is required. ServiceNow states it has already updated hosted instances and shipped the fix to partners and self-hosted customers, and that it is not aware of malicious exploitation, so residual exposure sits with self-hosted and partner-managed deployments that have not yet applied the update; no public exploit code has been identified at time of analysis, and the vendor advisory does not publish a specific triggering path.
Plaintext password disclosure in ServiceNow AI Platform occurs when the platform unintentionally persists a user's cleartext credential in a system table, allowing an authenticated low-privileged user who can view that table to read a password they are not entitled to see. Exploitation requires a valid account and that the unintended persistence actually occurred; no victim interaction is required. ServiceNow has released fixed patch levels, states it is not aware of malicious exploitation, and no public exploit identified at time of analysis.
Unauthenticated data disclosure in ServiceNow AI Platform instances stems from an authorization bypass (CVSS 8.7) that lets remote attackers read records they are not entitled to access. ServiceNow has already remediated its hosted instances, so exposure now concentrates on self-hosted and partner-managed deployments that have not applied the KB3159623 update or upgraded to a patched release. No public exploit code has been identified and no confirmed active exploitation (CISA KEV) has been reported, yet this remains a genuine priority for ServiceNow customers even in the absence of exploitation telemetry.
Unauthenticated SQL injection in the ServiceNow AI Platform allows remote attackers to execute arbitrary SQL statements against an instance's underlying database, potentially reading or altering instance data beyond its intended scope. ServiceNow has already remediated its hosted instances and shipped the update to partners and self-hosted customers, so residual exposure is confined to self-hosted or partner-managed deployments that have not yet moved to the patched release described in KB3159623. No public exploit code has been identified and the vendor states it is not aware of malicious exploitation at time of analysis, but the 9.3 CVSS 4.0 rating - along with a more conservative independent assessment that raises attack complexity to High and lowers availability impact - makes prompt patching of any remaining unpatched instance the priority.
Unauthenticated network requests against unpatched ServiceNow AI Platform instances can create, modify, or delete instance data beyond what was intended, per a vendor-remediated improper access control flaw rated 8.7 under CVSS 4.0 (independent assessment: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). Impact is integrity-only - no confidentiality or availability loss is described - and ServiceNow scopes exploitation to "certain circumstances," so the flaw is not universally reachable on every default deployment and undisclosed configuration preconditions appear to gate it. ServiceNow patched hosted instances in August 2026 and shipped the update to partners and self-hosted customers, leaving residual exposure concentrated in self-hosted and partner-managed instances that have not yet applied it. No public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis.
Authorization bypass in the ServiceNow AI Platform lets any authenticated user with an ordinary low-privilege account read records and data they are not entitled to, and because the flaw crosses a security scope boundary it can also enable further unintended access on resources beyond the vulnerable component. Exploitation is network-reachable and requires only a valid low-privilege session - no elevated role, no user interaction, and no special client configuration - so the practical attack path is a compromised, internal, or low-tier tenant account rather than an anonymous attacker. ServiceNow has already remediated hosted instances and distributed the update to partners and self-hosted customers, and the vendor states it is not aware of malicious exploitation; no public exploit code or CISA KEV entry was identified at time of analysis, leaving unpatched self-hosted and partner deployments as the primary exposure.
SQL injection in the ServiceNow AI Platform allows an unauthenticated attacker, under certain conditions, to execute arbitrary SQL statements against the instance's underlying database, enabling unauthorized read and modification of instance data beyond intended boundaries. The flaw carries a maximum CVSS 4.0 base score of 10.0 (network, no authentication, high impact to confidentiality, integrity, and availability, with scope-changing impact to subsequent systems). ServiceNow, which self-reported the issue, states it has no public exploit identified at time of analysis and is not currently aware of malicious exploitation.
Improper access control in the ServiceNow AI Platform allows an unauthenticated user, under certain circumstances, to create or modify instance data beyond intended boundaries, resulting in privilege escalation. ServiceNow has patched hosted instances and supplied updates to partners and self-hosted customers; the vendor rates this maximum severity (CVSS 4.0 10.0) but reports no known exploitation. No public exploit identified at time of analysis.
Remote code execution in the ServiceNow AI Platform lets an unauthenticated attacker, under certain unspecified circumstances, inject and run arbitrary code within a ServiceNow instance and read or modify instance data beyond intended authorization boundaries. ServiceNow rates it CVSS 4.0 10.0 (maximum) with a fully unauthenticated network vector and total confidentiality, integrity, and availability impact including subsequent-system impact. There is no public exploit identified at time of analysis, and ServiceNow states it is not currently aware of malicious exploitation.
Remote code execution in the ServiceNow AI Platform allows an unauthenticated attacker, under certain (unspecified) circumstances, to execute arbitrary code within the ServiceNow platform, carrying a critical CVSS 4.0 base score of 9.5. ServiceNow has patched hosted instances directly and issued fixes to self-hosted customers and partners; there is no public exploit identified at time of analysis, and the vendor states it is not currently aware of exploitation. The high CVSS complexity metric (AC:H) indicates the exploit is not trivially reproducible against arbitrary instances, tempering the otherwise maximal impact rating.
Domain separation bypass in ServiceNow AI Platform's SR - CSM - Task Plan Templates Store application allows an authenticated user with a specific role to create records in domains they do not have access to. Only deployments with the affected store application before Task Plan Templates v3.0 are implicated; the impact is limited to cross-domain data integrity, with confidentiality and availability unaffected. No malicious exploitation has been reported and no public exploit identified at time of analysis; the issue is rated CVSS 5.3 medium.
Sandbox escape in the ServiceNow AI Platform lets an authenticated user holding the admin role bypass Rhino JavaScript sandbox restrictions and execute arbitrary code on the underlying host operating system, with potential for further unintended access. The flaw is rated 9.4 under CVSS 4.0 and maps to CWE-284 (improper access control), and because the privilege prerequisite (PR:H) is an admin session, the practical threat model is a privileged insider or an attacker who has already compromised an admin account rather than an unauthenticated remote adversary; no user interaction is required. ServiceNow states it has already updated hosted instances and shipped the fix to partners and self-hosted customers, and that it is not aware of malicious exploitation, so residual exposure sits with self-hosted and partner-managed deployments that have not yet applied the update; no public exploit code has been identified at time of analysis, and the vendor advisory does not publish a specific triggering path.
Plaintext password disclosure in ServiceNow AI Platform occurs when the platform unintentionally persists a user's cleartext credential in a system table, allowing an authenticated low-privileged user who can view that table to read a password they are not entitled to see. Exploitation requires a valid account and that the unintended persistence actually occurred; no victim interaction is required. ServiceNow has released fixed patch levels, states it is not aware of malicious exploitation, and no public exploit identified at time of analysis.
Unauthenticated data disclosure in ServiceNow AI Platform instances stems from an authorization bypass (CVSS 8.7) that lets remote attackers read records they are not entitled to access. ServiceNow has already remediated its hosted instances, so exposure now concentrates on self-hosted and partner-managed deployments that have not applied the KB3159623 update or upgraded to a patched release. No public exploit code has been identified and no confirmed active exploitation (CISA KEV) has been reported, yet this remains a genuine priority for ServiceNow customers even in the absence of exploitation telemetry.
Unauthenticated SQL injection in the ServiceNow AI Platform allows remote attackers to execute arbitrary SQL statements against an instance's underlying database, potentially reading or altering instance data beyond its intended scope. ServiceNow has already remediated its hosted instances and shipped the update to partners and self-hosted customers, so residual exposure is confined to self-hosted or partner-managed deployments that have not yet moved to the patched release described in KB3159623. No public exploit code has been identified and the vendor states it is not aware of malicious exploitation at time of analysis, but the 9.3 CVSS 4.0 rating - along with a more conservative independent assessment that raises attack complexity to High and lowers availability impact - makes prompt patching of any remaining unpatched instance the priority.
Unauthenticated network requests against unpatched ServiceNow AI Platform instances can create, modify, or delete instance data beyond what was intended, per a vendor-remediated improper access control flaw rated 8.7 under CVSS 4.0 (independent assessment: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). Impact is integrity-only - no confidentiality or availability loss is described - and ServiceNow scopes exploitation to "certain circumstances," so the flaw is not universally reachable on every default deployment and undisclosed configuration preconditions appear to gate it. ServiceNow patched hosted instances in August 2026 and shipped the update to partners and self-hosted customers, leaving residual exposure concentrated in self-hosted and partner-managed instances that have not yet applied it. No public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis.
Authorization bypass in the ServiceNow AI Platform lets any authenticated user with an ordinary low-privilege account read records and data they are not entitled to, and because the flaw crosses a security scope boundary it can also enable further unintended access on resources beyond the vulnerable component. Exploitation is network-reachable and requires only a valid low-privilege session - no elevated role, no user interaction, and no special client configuration - so the practical attack path is a compromised, internal, or low-tier tenant account rather than an anonymous attacker. ServiceNow has already remediated hosted instances and distributed the update to partners and self-hosted customers, and the vendor states it is not aware of malicious exploitation; no public exploit code or CISA KEV entry was identified at time of analysis, leaving unpatched self-hosted and partner deployments as the primary exposure.
SQL injection in the ServiceNow AI Platform allows an unauthenticated attacker, under certain conditions, to execute arbitrary SQL statements against the instance's underlying database, enabling unauthorized read and modification of instance data beyond intended boundaries. The flaw carries a maximum CVSS 4.0 base score of 10.0 (network, no authentication, high impact to confidentiality, integrity, and availability, with scope-changing impact to subsequent systems). ServiceNow, which self-reported the issue, states it has no public exploit identified at time of analysis and is not currently aware of malicious exploitation.
Improper access control in the ServiceNow AI Platform allows an unauthenticated user, under certain circumstances, to create or modify instance data beyond intended boundaries, resulting in privilege escalation. ServiceNow has patched hosted instances and supplied updates to partners and self-hosted customers; the vendor rates this maximum severity (CVSS 4.0 10.0) but reports no known exploitation. No public exploit identified at time of analysis.
Remote code execution in the ServiceNow AI Platform lets an unauthenticated attacker, under certain unspecified circumstances, inject and run arbitrary code within a ServiceNow instance and read or modify instance data beyond intended authorization boundaries. ServiceNow rates it CVSS 4.0 10.0 (maximum) with a fully unauthenticated network vector and total confidentiality, integrity, and availability impact including subsequent-system impact. There is no public exploit identified at time of analysis, and ServiceNow states it is not currently aware of malicious exploitation.
Remote code execution in the ServiceNow AI Platform allows an unauthenticated attacker, under certain (unspecified) circumstances, to execute arbitrary code within the ServiceNow platform, carrying a critical CVSS 4.0 base score of 9.5. ServiceNow has patched hosted instances directly and issued fixes to self-hosted customers and partners; there is no public exploit identified at time of analysis, and the vendor states it is not currently aware of exploitation. The high CVSS complexity metric (AC:H) indicates the exploit is not trivially reproducible against arbitrary instances, tempering the otherwise maximal impact rating.
Domain separation bypass in ServiceNow AI Platform's SR - CSM - Task Plan Templates Store application allows an authenticated user with a specific role to create records in domains they do not have access to. Only deployments with the affected store application before Task Plan Templates v3.0 are implicated; the impact is limited to cross-domain data integrity, with confidentiality and availability unaffected. No malicious exploitation has been reported and no public exploit identified at time of analysis; the issue is rated CVSS 5.3 medium.