Critical ServiceNow AI Platform Flaw Exploited in Remote Code Execution Attacks

#cybersecurity #infosec

Summary

ServiceNow AI Platform is facing active exploitation of a critical sandbox escape vulnerability (CVE-2026-6875) that allows unauthenticated attackers to execute remote code.

Take Action:

If you self-host ServiceNow, apply the July 13th security patches ASAP. This being actively exploited and lets attackers take over your instance without login. After patching, check your logs for suspicious activity around the /assessment_thanks.do endpoint and review the Guarded Scripts list for any custom code that needs updating.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines