Loading story…
ServiceNow disclosed and remediated CVE-2026-6875, a critical sandbox escape in its AI Platform that can allow unauthenticated remote code execution in certain circumstances. The vulnerability affects both hosted and self-hosted ServiceNow environments, carries a CVSS 4.0 score of 9.5, and was published in advisory KB3137947. ServiceNow said it has already deployed security updates to hosted instances and issued patched family releases and updates for self-hosted customers and partners.
The company said it is not currently aware of active exploitation, but warned that successful compromise could let attackers execute code within the ServiceNow platform, disrupt workflows, access sensitive data, modify records, and enable follow-on malicious activity. To reduce near-term exploit risk, ServiceNow limited public technical details while directing customers to promptly apply the relevant updates or upgrade to patched releases, including fixes for the Brazil, Australia, Zurich, and Yokohama release families.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
A new report says technical details and proof-of-concept exploit code for CVE-2026-6875 were publicly disclosed, increasing the risk of broader exploitation of the ServiceNow AI Platform flaw. The report describes attacks against the pre-authentication /assessment_thanks.do endpoint using crafted payloads to achieve sandbox escape and remote code execution.
After initially reporting that in-the-wild exploitation used a different sandbox-escape path, Defused later corrected its assessment and said the captured payload was identical to Searchlight Cyber’s published proof-of-concept. The update suggested some observed activity may have come from researchers rather than threat actors.
Defused reported that attackers began exploiting CVE-2026-6875 in the wild only days after ServiceNow released patches. The attacks targeted the /assessment_thanks.do pre-authentication sink and used a different sandbox-escape path than the previously published proof of concept.
Following CVE-2026-6875, ServiceNow introduced stricter sandbox protections called Guarded Script to reduce the likelihood of future sandbox escapes. The change is described as an additional hardening measure beyond the immediate mitigation and released patches.
ServiceNow said it addressed CVE-2026-6875 by deploying security updates to hosted instances and releasing patched family versions and updates for self-hosted customers and partners. The remediation covered affected releases including Brazil, Australia, Zurich, and Yokohama.
On 2026-07-13, ServiceNow published advisory KB3137947 disclosing CVE-2026-6875, a critical sandbox escape in its AI Platform that could enable unauthenticated remote code execution. The company said it was not aware of active exploitation at the time.
According to the new reference, researchers reported CVE-2026-6875 to ServiceNow on 2026-04-01. The vendor reportedly deployed an immediate mitigation for cloud instances within 24 hours, ahead of the broader July advisory and fixes.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
22 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourcethehackernews.com
Open sourcesecurityaffairs.com
Open sourcethreataft.com
Open sourcereddit.com
Open sourcecvefeed.io
Open sourceassetnote.io
Open sourcefortiguard.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
ServiceNow patched a **critical unauthenticated remote code execution (RCE)** vulnerability in the *ServiceNow AI Platform* tracked as **CVE-2026-0542**. The flaw can allow an unauthenticated attacker, under certain conditions, to execute code within the **ServiceNow Sandbox**—a restricted environment intended to isolate untrusted code—creating risk of broader instance compromise, including potential data theft and workflow manipulation. Public technical details were limited, but the issue was characterized as remotely reachable (typically over HTTPS) and high impact, with reporting citing **critical severity (CVSS 9.8)**. ServiceNow’s advisory (**KB2693566**) states the company deployed security updates to affected **hosted customer instances** and also made updates available to **self-hosted customers and partners** via patches/hotfixes. As of the advisory information reflected in CVE tracking, ServiceNow reported it was **not aware of active exploitation against customer instances**, but recommended customers apply the relevant updates or upgrade promptly to mitigate the risk from an unauthenticated RCE path into the sandboxed execution environment.
Jun 29, 2026
ServiceNow customers were urged to patch multiple **critical remote code execution** vulnerabilities after reports that flaws in the platform were being **actively exploited**. One set of bugs affected core ServiceNow deployments and was serious enough to trigger immediate warnings from security researchers and industry media, highlighting the risk of unauthenticated or low-friction compromise in widely used enterprise workflow environments. A separate report later identified another **critical RCE vulnerability** in the **ServiceNow AI Platform**, expanding concern from the core platform to newer AI-enabled components. Together, the disclosures indicate that attackers have had viable paths to execute code against ServiceNow environments across both traditional and AI-related services, raising the stakes for organizations that use the platform for IT, HR, security, and business process automation.
Jun 29, 2026
ServiceNow disclosed and remediated a **critical** vulnerability in its AI Platform, tracked as **CVE-2025-12420** (CVSS **9.3**), that could allow an **unauthenticated attacker to impersonate legitimate users** and perform actions with the victim’s entitlements. The issue impacts ServiceNow AI features including **Now Assist AI Agents** and the **Virtual Agent API**; ServiceNow reported deploying fixes to most hosted instances in October 2025 and providing updates to partners and self-hosted customers, and stated it has **no evidence of exploitation** prior to remediation. Research associated with the disclosure highlighted broader risks in enterprise AI agent deployments, including the potential for **second-order prompt injection** when default settings and agent-to-agent capabilities (e.g., *agent discovery*) are not tightly controlled. In testing described by the reporting, low-privileged users could embed malicious instructions into data fields later processed by higher-privileged AI agents, potentially leading to unauthorized access or changes; customers were advised to upgrade to patched releases (including *Now Assist AI Agents* `5.1.18+` / `5.2.19+` and *Virtual Agent API* `3.15.2+` / `4.0.4+`) and to apply relevant security updates across hosted and self-managed environments.
Jun 29, 2026