Loading vulnerability…
CVE-2026-6875 is a critical pre-authentication remote code execution vulnerability in the ServiceNow AI Platform. The flaw is described as a sandbox escape in the server-side JavaScript execution environment used by the platform. Available technical reporting indicates that attacker-controlled input can reach GlideRecord query handling in pre-authentication code paths, where values prefixed for JavaScript evaluation are executed in a restricted sandbox context. Researchers reported that the sandbox could then be escaped by abusing differences between the restricted script environment and code executed through script-include mechanisms, ultimately allowing attacker-controlled JavaScript to run in a less restricted or unsandboxed context. Public reporting also associates exploitation with a pre-authentication request path that passes unsanitized user input into a GlideRecord query. Successful exploitation does not require authentication and can result in arbitrary code execution within the ServiceNow platform.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
2 valid exploits after Mallory filtered fakes, detection scripts, and README-only repos.
This repository is a Python-based exploit toolkit for the claimed ServiceNow pre-auth RCE vulnerability CVE-2026-6875. It contains two main code files: exploit.py, which is the offensive component, and verifier.py, which is a safer vulnerability scanner/verifier. The repository is not tied to a major public framework like Metasploit or Nuclei; it is a standalone tool. exploit.py is the primary entry point and implements a full attack chain against ServiceNow over HTTPS. The core logic builds a URL-encoded javascript: payload for the sysparm_assessable_type parameter on /assessment_thanks.do. The payload attempts a sandbox escape by abusing DiscoveryFunctions, AbstractAjaxProcessor, and Class.create, then executes OS commands through java.lang.Runtime.getRuntime().exec(). The code includes payload builders for direct command execution, callback-based output exfiltration using ServiceNow HTTP request classes, and reverse-shell generation. It also exposes many operator-focused CLI options such as single-target mode, file-based batch mode, threading, retries, timeout/delay tuning, custom cookie and User-Agent values, insecure TLS, WAF bypass obfuscation, callback host/port, webhook, persistence, lateral movement, cleanup, fileless mode, and C2 host/port. Based on these features, the exploit is more than a simple PoC and is best classified as OPERATIONAL. verifier.py is a separate detection-oriented utility. It fingerprints ServiceNow by requesting /navpage.do, /login.do, /index.do, and /ssologin.do; attempts rough version inference from response content; checks whether /assessment_thanks.do is reachable; and tests for JavaScript injection using benign gs.print-style payloads. It appears intended to validate exposure without full weaponized exploitation. Fingerprintable targets and observables are centered on HTTPS ServiceNow endpoints, especially /assessment_thanks.do and the sysparm_assessable_type parameter. The exploit also supports attacker infrastructure endpoints for callbacks or reverse shells, represented by operator-supplied callback/C2 host and port values. Additional filesystem observables mentioned in the repository include /var/tmp/, /etc/passwd, /etc/shadow, ~/.ssh/authorized_keys, /etc/systemd/system/, and extraweb_access.log, which are relevant as post-exploitation artifacts or IOC locations. Overall, the repository's purpose is to provide both a vulnerability verifier and a weaponized exploitation tool for unauthenticated remote code execution against vulnerable self-hosted ServiceNow instances.
Small standalone PoC repository with 4 files: license, gitignore, README, and a single Python exploit script. The only code file, cve-2026-6875.py, is the clear entry point and implements a web/network exploit against a claimed vulnerable ServiceNow endpoint. The script accepts a target URL and optional collaborator URL, builds a malicious javascript: payload, URL-encodes it, and submits it via HTTP POST in the sysparm_assessable_type parameter. The payload is designed to abuse ServiceNow server-side objects and methods such as DiscoveryFunctions, AbstractAjaxProcessor, Class.create, and GlideHTTPRequest to escape a sandbox and execute arbitrary JavaScript in global context. If a collaborator URL is supplied, the payload causes the target to make an outbound GET request with a distinctive X-Exploit header, providing an observable success signal; otherwise it executes a simple gs.print marker. The script disables TLS verification, uses a browser-like User-Agent, and prints response metadata for operator feedback. README content is mostly generic legal/educational boilerplate and does not add operational exploit logic. Overall, this is a basic but functional standalone PoC rather than a framework module or detection script.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
157 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A ServiceNow AI Platform vulnerability listed among vulnerabilities actively exploited or operationally weaponized in July 2026.
A pre-authentication JavaScript sandbox escape remote code execution vulnerability in the ServiceNow AI Platform.
A critical remote code execution vulnerability in the ServiceNow AI platform, described as a sandbox escape that can allow an unauthenticated attacker to execute arbitrary code.
A critical sandbox escape vulnerability in the ServiceNow AI Platform that can allow an unauthenticated attacker to achieve arbitrary code execution and potentially completely compromise a ServiceNow instance and connected proxy servers.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.