Critical ServiceNow AI Platform flaw now exploited in attacks

A critical flaw in the ServiceNow AI Platform is now being exploited in attacks. ServiceNow disclosed CVE-2026-6875 on July 13 in advisory KB3137947, describing it as a sandbox escape that lets an attacker bypass intended platform restrictions and execute code, and noting that exploitation does not require authentication. The AI Platform underpins much of the company's IT service management and workflow tooling, and the flaw affects both hosted and self-hosted deployments. ServiceNow deployed fixes to its hosted instances and released updates for self-hosted customers. Because these instances commonly connect to identity systems, cloud services, and endpoint management tools, a compromised one is a strong pivot point.

Check

Confirm your ServiceNow family release includes the fix for this flaw, prioritize self-hosted and internet-reachable instances, and review platform and AI feature logs for anomalous activity.

Affected

Organizations running unpatched ServiceNow AI Platform deployments (CVE-2026-6875), hosted or self-hosted; unauthenticated attackers can escape the sandbox and run code on a platform wired into identity, cloud, and endpoint systems.

Fix

Apply the fixed release for your family, verify hosted instances received the update, restrict instance exposure, and rotate integration tokens if compromise is suspected, while monitoring for unusual record changes.