Read the docs
TI-2025-11396 Aliases CVE-2025-12420GHSA-mwg5-cwh8-88m5

Unauthenticated Privilege Escalation in ServiceNow AI Platform

Priority HIGH 80CWE-250Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-250.

Summary

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update to  hosted instances in October 2025. Security updates have also been provided to ServiceNow self-hosted customers, partners, and hosted customers with unique configurations. Additionally, the vulnerability is addressed in the listed Store App versions. We recommend that customers promptly apply an appropriate security update or upgrade if they have not already done so.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.53188 98th percentileScored 2026-11-07
Fix Fixed Virtual Agent API (ServiceNow): 3.15.2, 4.0.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ServiceNowNow Assist AI Agents5.0.26 – 5.1.17; 5.0.26 – 5.2.18—No fix listedCNA
ServiceNowVirtual Agent APIbefore 3.15.2; before 4.0.43.15.2, 4.0.4Patch availableCNA
  • Now Assist AI Agents VendorServiceNow Affected 5.0.26 – 5.1.17; 5.0.26 – 5.2.18 Fixed in — No fix listed CNA
  • Virtual Agent API VendorServiceNow Affected before 3.15.2; before 4.0.4 Fixed in 3.15.2, 4.0.4 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:servicenow:now_assist_ai_agents:*:*:*:*:*:*:*:*before 5.1.18; 5.2.0 to before 5.2.19VulnerableServiceNow
cpe:2.3:a:servicenow:virtual_agent_api:*:*:*:*:*:*:*:*before 3.15.2; 4.0.0 to before 4.0.4VulnerableServiceNow
  • cpe:2.3:a:servicenow:now_assist_ai_agents:*:*:*:*:*:*:*:* Versions before 5.1.18; 5.2.0 to before 5.2.19 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:virtual_agent_api:*:*:*:*:*:*:*:* Versions before 3.15.2; 4.0.0 to before 4.0.4 Vulnerable ·ServiceNow

Remediation

  • Fix · CNA Virtual Agent API (ServiceNow) Fixed in 3.15.2, 4.0.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-12420
  2. 2026-10-03 Alias added: GHSA-mwg5-cwh8-88m5

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences