External risk intelligence

ServiceNow AI Platform Missing Authorization Data Extraction Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.3)

CVE-2026-86860

ServiceNow instances are typically deployed as internet-facing enterprise platforms and identity portals. The vulnerability exists in the AI Platform, which is a core component accessible via these public-facing instances, making the attack surface inherently internet-reachable by design.

Privilege Escalation

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

ServiceNow has addressed a vulnerability in its AI Platform that could allow an unauthenticated user to escalate privileges and access instance data beyond their intended scope. A security update has been deployed for hosted instances and provided to partners and self-hosted customers.

Missing authorization lets anyone access sensitive data.
Critical flaw affects AI platform, potentially impacting all users.
Confirm relevance to understand potential exposure.

Attack Path

How an attacker could exploit the issue

An attacker could potentially reach the vulnerable component without needing any credentials by exploiting a flaw in the ServiceNow AI Platform. This could allow them to access and extract sensitive instance data beyond their intended permissions, leading to an escalation of their privileges.

No authentication needed to start.
Access AI Platform to trigger vulnerability.
Leads to data extraction and privilege escalation.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability could allow an unauthenticated user to access sensitive instance data beyond their intended permissions within the ServiceNow AI Platform. This could lead to unauthorized information disclosure and potentially privilege escalation under specific conditions.

Instance data could be exposed.
Unauthenticated access to platform features.
Unauthorized data access and privilege escalation.

Operational Fix

Recommended remediation, mitigation, and detection steps

The ServiceNow platform and its AI components are likely managed by a combination of platform operations, application owners, and potentially a vendor management team due to its SaaS nature. The immediate first step is to verify the presence of the affected AI Platform within your ServiceNow instance, assess its business criticality, and confirm the exact ownership for remediation. Following this, a risk-based plan for applying the security update should be developed, coordinating with ServiceNow or your internal teams as appropriate.

Ownership: Platform or application owners.
Verify: AI Platform presence and exposure.
Action: Plan and apply security updates.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the ServiceNow AI Platform?

The ServiceNow AI Platform is a core component of the ServiceNow enterprise ecosystem that integrates machine learning and automated intelligence capabilities. It is designed to enhance workflows, optimize service management, and provide predictive insights across an organization's digital operations. By processing and analyzing organizational data, it assists in automating complex business processes.

How does CVE-2026-86860 cause a security risk?

This vulnerability is classified as a missing authorization issue (CWE-862). In this context, it means the system fails to properly verify if a user has permission to access specific AI Platform functions. Because this check is absent, an unauthorized person could bypass standard security controls to extract instance data or escalate their privileges, effectively acting as an authorized user.

Do I need to be logged into the platform to trigger this?

No. The vulnerability allows an unauthenticated user to access the affected components. This means an attacker does not need valid credentials or an existing session to initiate a request to the vulnerable AI Platform functions. If the system is reachable, the lack of authorization checks is the primary driver of the risk, regardless of user login state.

Is my ServiceNow instance at risk?

Halo Surface Signal notes that ServiceNow instances are typically deployed as internet-facing enterprise platforms. Because the AI Platform is a core, often exposed part of these instances, it is generally reachable from the public internet by design. If your instance is internet-facing, it falls within the scope of this vulnerability and should be considered potentially accessible to external parties.

What is the first step to address this CVE?

Begin by verifying whether your specific instance uses the ServiceNow AI Platform. Once presence is confirmed, identify the internal team responsible for platform management and application ownership. You should then check the status of your instance updates and coordinate with your ServiceNow support representative or internal administrators to ensure the relevant security patch is applied promptly.

References

support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.