Vulnerabilities · 58 days ago
ServiceNow said on August 27 that it had patched four vulnerabilities across its AI Platform and Now Platform, including three critical code-injection issues and one high-severity sandbox escape. The fixes cover hosted instances, while self-hosted customers received hotfixes for the Xanadu, Yokohama, Zurich, and Australia releases.
ServiceNow said the critical bugs need no authentication or user interaction. A crafted request can be accepted as a trusted internal action, letting an attacker run code, create or modify records, issue SQL against the underlying database, or raise privileges inside the platform itself.
That matters most for deployments that sit near HR, vendor, or finance workflows: a flaw in the platform layer can reach the records it brokers, and self-hosted instances do not get the benefit of vendor-side remediation until the local hotfix lands.
3 sources covering this story
ServiceNow Patches 3 Critical Code Injection Vulnerabilities
Attackers could exploit the security defects to execute arbitrary code and access or tamper with data.
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow patched four AI Platform flaws, including three CVSS 10.0 bugs that can enable unauthenticated code execution or data access.
ServiceNow warns of three max severity security vulnerabilities
ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks.
Part of the PlainSec briefing for 2026-09-01