External risk intelligence

ServiceNow AI Platform SQL Injection Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.3)

CVE-2026-13016

ServiceNow instances are typically deployed as internet-facing platforms, and the vulnerability exists in the AI platform component which is often exposed as an unauthenticated or public-facing endpoint in common real-world deployments.

SQL Injection

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A vulnerability in the ServiceNow AI Platform could allow an unauthenticated user to execute unauthorized SQL commands, potentially leading to unauthorized access or modification of instance data. ServiceNow has released security updates for this issue, and while malicious exploitation is not currently known, customers are advised to apply updates promptly.

Unauthorized database commands could expose sensitive data.
This affects the AI Platform, a core component.
Confirm relevance and exposure to your ServiceNow instance.

Attack Path

How an attacker could exploit the issue

An unauthenticated user could potentially interact with the ServiceNow AI Platform, triggering a vulnerability that allows for the execution of arbitrary SQL commands. This could lead to unauthorized access to or modification of sensitive instance data.

No authentication required for access.
Vulnerable component within the AI Platform.
Risk of data access or modification.

Live Threat

Current exploitation, exposure, and threat context

This SQL injection vulnerability could allow an unauthenticated user to execute arbitrary SQL commands, potentially leading to unauthorized access to or modification of instance data, when supported by the advisory.

Affects instance data.
Unauthenticated user executes SQL commands.
Unauthorized access to or modification of data.

Operational Fix

Recommended remediation, mitigation, and detection steps

System owners and application owners responsible for ServiceNow instances must act. The first practical step is to identify all ServiceNow AI Platform deployments, confirm their reachability and business criticality, and then ascertain the accountable owner to prioritize remediation.

Application owners should own the issue.
Verify AI Platform reachability and criticality.
Plan and execute the provided security update.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the ServiceNow AI Platform?

The ServiceNow AI Platform is a foundational component within the ServiceNow environment designed to provide intelligent automation, machine learning capabilities, and generative AI features. Organizations use it to streamline workflows, enhance data processing, and automate complex service management tasks across their enterprise operations.

What does CVE-2026-13016 mean for the database?

This vulnerability is classified as CWE-89, or Improper Neutralization of Special Elements used in an SQL Command. It means that the application fails to properly filter input provided by users. Because of this weakness, an attacker can supply malicious database queries that the system executes unintentionally, potentially granting unauthorized access to, or allowing modification of, the sensitive data stored in the instance's underlying database.

How can an attacker trigger this SQL injection?

The vulnerability is triggered by an unauthenticated user interacting with the AI Platform. Because it requires no prior login or session credentials, the attacker simply needs to reach the specific affected endpoint. It is important to note that this bug is not triggered by standard administrative actions or typical internal platform configurations, but rather through specific requests crafted to exploit the lack of input sanitization in the AI component.

Is my ServiceNow instance at risk?

Halo Surface Signal indicates that ServiceNow instances are often deployed as internet-facing platforms, increasing the likelihood that the AI Platform component is accessible to external actors. If your instance is reachable from the public internet, it faces a higher level of risk compared to configurations strictly limited to internal networks. You should verify your specific deployment's reachability to understand your exposure.

What steps should I take to fix this?

The primary response is to prioritize applying the security updates provided by ServiceNow. First, identify your AI Platform deployments and determine who owns them. Once the responsible team is confirmed, verify the current patch status of your environment against the vendor’s guidance. If your instance has not yet received the update, coordinate with your technical team to apply the relevant patch or perform an upgrade to a version where this vulnerability has been remediated.

References

support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.