CyberSecurity News

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

The Hacker News

· July 21, 2026

AI summary

A critical security flaw in the ServiceNow AI Platform is being exploited by threat actors, according to Defused Cyber. The vulnerability, identified as CVE-2026-6875, has a CVSS score of 9.5 and allows an unauthenticated user to execute arbitrary code due to a sandbox escape issue. Patches for the flaw have been released. Defused Cyber has observed in-the-wild exploitation of this vulnerability. The flaw could enable unauthenticated code execution, posing a significant risk. Threat intelligence firm Defused Cyber shared its findings on the social media platform X.

Vulnerabilities mentioned

CVE-2026-6875

UNKNOWN

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform. ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners. Further, the vulnerability is addressed in the listed patches and family releases, which have been made available to hosted and self-hosted customers, as well as partners. We are not currently aware of exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

Read the full article at The Hacker Newsthehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.