ServiceNow Patches 3 Critical Code Injection Vulnerabilities
ServiceNow disclosed four vulnerabilities in its AI platform, three rated critical (CVSS 10/10) and one high (CVSS 8.7) The critical flaws include arbitrary code execution (CVE-2026-18885), improper access control enabling privilege escalation (CVE-2026-18886), and SQL injection (CVE-2026-74820) All three critical vulnerabilities are unauthenticated and low-complexity to exploit, requiring no user interaction A fourth high-severity sandbox escape flaw (CVE-2026-6876) allows unauthenticated code
Analysis
TL;DR
- ServiceNow disclosed four vulnerabilities in its AI platform, three rated critical (CVSS 10/10) and one high (CVSS 8.7)
- The critical flaws include arbitrary code execution (CVE-2026-18885), improper access control enabling privilege escalation (CVE-2026-18886), and SQL injection (CVE-2026-74820)
- All three critical vulnerabilities are unauthenticated and low-complexity to exploit, requiring no user interaction
- A fourth high-severity sandbox escape flaw (CVE-2026-6876) allows unauthenticated code execution within the Now Platform
- Patches are available for hosted instances; self-hosted customers across Xanadu, Yokohama, Zurich, and Australia releases should apply hotfixes immediately
Why It Matters
This is a significant security event for enterprises relying on ServiceNow, as unauthenticated, low-complexity exploits for code injection and SQL injection give attackers direct paths to sensitive HR, finance, and vendor data. The speed at which threat actors target the window between disclosure and patch adoption makes this an urgent operational concern for IT and security teams.
Technical Details
- CVE-2026-18885 (CVSS 10/10): Arbitrary code execution vulnerability in the ServiceNow AI platform, allowing attackers to execute code and modify arbitrary data without authentication.
- CVE-2026-18886 (CVSS 10/10): Improper access control flaw enabling privilege escalation, data creation/modification, and unauthorized access to instance data.
- CVE-2026-74820 (CVSS 10/10): SQL injection vulnerability in the GraphQL Composite Data API that permits execution of arbitrary SQL statements against the underlying database.
- CVE-2026-6876 (CVSS 8.7): Sandbox escape weakness allowing unauthenticated code execution within the Now Platform, granting access beyond intended permissions.
- Patches are deployed across all hosted instances; hotfixes are available for self-hosted deployments on Xanadu, Yokohama, Zurich, and Australia releases.
Industry Insight
- Enterprises with self-hosted ServiceNow instances should treat patching as an emergency, not a scheduled task—the gap between disclosure and exploitation is shrinking, and unauthenticated exploits dramatically lower the barrier for attackers.
- Security teams should audit their ServiceNow instances for exposure of the GraphQL Composite Data API and any endpoints susceptible to SQL injection as an immediate mitigation while patches are applied.
- This incident reinforces the broader trend of AI platform integrations becoming high-value attack surfaces; organizations should prioritize zero-trust segmentation and continuous vulnerability monitoring for all AI-enabled enterprise software.
Disclaimer: The above content is generated by AI and is for reference only.