External risk intelligence

ServiceNow AI Platform Remote Code Execution Vulnerability.

CVE advisorySeverity: CRITICAL (CVSS 9.5)

CVE-2026-6875

ServiceNow is a platform commonly deployed as a public-facing web service for enterprise operations, identity, and workflow management. The vulnerability exists in the AI platform components, which are frequently exposed as internet-facing interfaces in standard deployments, making them readily reachable by remote users.

Code Injection

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

ServiceNow has resolved a critical vulnerability in its AI platform that could allow an unauthenticated user to execute code remotely. This issue has been addressed through security updates provided to both hosted and self-hosted instances, with no known exploitation currently reported.

Unauthenticated code execution in AI platform.
Platform integrity and data security at risk.
Confirm relevance and ensure timely updates.

Attack Path

How an attacker could exploit the issue

An attacker could gain access to the ServiceNow AI platform through an unauthenticated pathway, potentially leading to remote code execution. This vulnerability resides within the AI platform's components, which might be exposed to external access. If triggered, the vulnerability could allow an attacker to execute arbitrary code on the platform.

No authentication required.
Triggered via AI platform components.
Enables unauthenticated code execution.

Live Threat

Current exploitation, exposure, and threat context

A remote code execution vulnerability in the ServiceNow AI platform could allow an unauthenticated user to execute code on the platform under specific conditions. This could affect system data, service behavior, and sensitive information processed by the platform.

Platform data and AI capabilities at risk.
Code execution through unauthenticated network access.
Disruption of service and potential data compromise.

Operational Fix

Recommended remediation, mitigation, and detection steps

This vulnerability in the ServiceNow AI platform requires action from teams managing ServiceNow instances, potentially including platform, security, and application owners. The first practical step is to identify all ServiceNow deployments, confirm their exposure and business criticality, and then coordinate the application of security updates provided by ServiceNow to mitigate the risk.

Platform and security teams should own remediation.
Verify instance reachability and criticality.
Plan and apply vendor-provided security updates.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the ServiceNow AI platform?

The ServiceNow AI platform is a suite of intelligent tools integrated into the ServiceNow enterprise workflow environment. Organizations use these components to automate tasks, analyze data, and manage complex internal processes. By embedding artificial intelligence into the core platform, ServiceNow enables users to streamline identity management, service requests, and operational workflows through sophisticated, often internet-facing interfaces.

What does CVE-2026-6875 mean for my system?

This CVE identifies a critical remote code execution vulnerability. In plain terms, it is a weakness that could allow an unauthenticated attacker to run unauthorized commands directly on your ServiceNow platform. This type of flaw bypasses the need for a user account, potentially granting an attacker the ability to interfere with sensitive system data, disrupt service behavior, or compromise the platform's integrity.

How is this vulnerability triggered?

The flaw is triggered by sending specially crafted requests to components within the AI platform that do not verify the identity of the sender. Because the vulnerability exists in the AI components themselves, it does not require an attacker to have a valid login or prior access to the system. Standard platform operations that do not interact with these specific AI-enabled interfaces are not the pathway for this exploit.

Is my instance affected by this?

According to Halo Surface Signal, this vulnerability is highly relevant because ServiceNow is typically deployed as a public-facing service. Since the AI platform components are often designed to be internet-facing to support enterprise operations, they are readily reachable by remote users. If your instance is accessible via the internet, you should assume it is a potential target and verify your patch status immediately.

What should I do to secure my environment?

The primary response is to apply the security updates or patches provided by ServiceNow. Start by identifying all of your ServiceNow deployments—both hosted and self-hosted—to assess which are impacted. Coordinate with your platform and security teams to prioritize the installation of the vendor-supplied updates. Promptly applying these patches is the necessary step to neutralize the risk of unauthenticated code execution.

References

support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3137947

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.