Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
A critical sandbox escape vulnerability (CVE-2026-6875, CVSS 9.5) in the ServiceNow AI Platform is being actively exploited in the wild to achieve unauthenticated code execution. The flaw allows attackers to completely compromise ServiceNow instances and connected proxy servers via the "/assessment_thanks.do" endpoint using HTTP POST requests. ServiceNow released patches across multiple versions (Brazil, Australia, Zurich, Yokohama) in June and is implementing stricter restrictions on code execu
Analysis
TL;DR
- A critical sandbox escape vulnerability (CVE-2026-6875, CVSS 9.5) in the ServiceNow AI Platform is being actively exploited in the wild to achieve unauthenticated code execution.
- The flaw allows attackers to completely compromise ServiceNow instances and connected proxy servers via the "/assessment_thanks.do" endpoint using HTTP POST requests.
- ServiceNow released patches across multiple versions (Brazil, Australia, Zurich, Yokohama) in June and is implementing stricter restrictions on code execution within sandbox contexts.
- While threat intelligence firms report active exploitation, ServiceNow officially stated they have not observed evidence of attacks targeting their hosted instances, urging all customers to apply available fixes immediately.
Why It Matters
This incident highlights the severe risks associated with enterprise AI platforms that integrate complex scripting and sandboxing mechanisms, where a single misconfiguration can lead to full system compromise. For security practitioners and IT administrators, it underscores the urgency of patching critical vulnerabilities in widely used workflow automation tools, as unauthenticated access can bypass traditional perimeter defenses. The discrepancy between independent threat intelligence reports and vendor statements also emphasizes the need for proactive verification and rapid response in enterprise security operations.
Technical Details
- Vulnerability Type: Sandbox escape leading to arbitrary code execution, rated Critical with a CVSS score of 9.5.
- Attack Vector: Exploitation targets the pre-authentication endpoint "/assessment_thanks.do" via HTTP POST requests, allowing unauthenticated users to execute malicious payloads.
- Impact: Successful exploitation results in a complete compromise of the ServiceNow instance and all connected proxy servers, granting attackers full control over the environment.
- Remediation: Patches were distributed in June for various platform versions including Brazil EA/GA, Australia Patch 2, Zurich Patch 7b/9, and Yokohama Patch 12/13. ServiceNow is also enhancing security by restricting permissible code types in sandbox contexts.
- Disclosure Timeline: Reported by Searchlight Cyber on April 1, 2026, with in-the-wild exploitation confirmed by Defused Cyber shortly thereafter.
Industry Insight
Enterprise organizations must prioritize immediate patch management for AI-enabled workflow platforms, treating sandbox vulnerabilities with the same severity as direct server breaches. The presence of active exploitation campaigns suggests that threat actors are specifically targeting AI integration points, necessitating enhanced monitoring of API endpoints and sandbox execution logs. Furthermore, vendors should maintain transparent communication regarding threat levels, as conflicting information between independent researchers and official statements can hinder effective incident response planning.
Disclaimer: The above content is generated by AI and is for reference only.