Read the docs
TI-2026-06032 Aliases CVE-2026-6876GHSA-7fw9-72q7-3g7j

Sandbox Escape in ServiceNow AI Platform

Priority MEDIUM 44CWE-1284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass, Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-693 and CWE-94.

Summary

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the ServiceNow AI Platform, potentially leading to more access to the ServiceNow AI Platform than intended.  ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances.  We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00677 52nd percentileScored 2026-11-07
Fix Fixed ServiceNow AI Platform (ServiceNow): Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b, Yokohama Patch 13 Hot Fix 4 +12

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ServiceNowServiceNow AI Platformbefore Xanadu Patch 11 Hot Fix 7a; before Yokohama Patch 12 Hot Fix 3b; before Yokohama Patch 13 Hot Fix 4; before Zurich Patch 7b Hot Fix 3; before Zurich Patch 8 Hot Fix 5; before Zurich Patch 9 Hot Fix 6; before Zurich Patch 10 Hot Fix 2m (m-branch); before Zurich Patch 10 Hot Fix 3 (standard); before Zurich Patch 11; before Zurich Patch 12; before Australia Patch 2 Hot Fix 3; before Australia Patch 3 Hot Fix 2; before Australia Patch 3m; before Australia Patch 4; before Australia Patch 5Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b, Yokohama Patch 13 Hot Fix 4, Zurich Patch 7b Hot Fix 3, Zurich Patch 8 Hot Fix 5, Zurich Patch 9 Hot Fix 6, Zurich Patch 10 Hot Fix 2m (m-branch), Zurich Patch 10 Hot Fix 3 (standard), Zurich Patch 11, Zurich Patch 12, Australia Patch 2 Hot Fix 3, Australia Patch 3 Hot Fix 2, Australia Patch 3m, Australia Patch 4, Australia Patch 5Patch availableCNA
  • ServiceNow AI Platform VendorServiceNow Affected before Xanadu Patch 11 Hot Fix 7a; before Yokohama Patch 12 Hot Fix 3b; before Yokohama Patch 13 Hot Fix 4; before Zurich Patch 7b Hot Fix 3; before Zurich Patch 8 Hot Fix 5; before Zurich Patch 9 Hot Fix 6; before Zurich Patch 10 Hot Fix 2m (m-branch); before Zurich Patch 10 Hot Fix 3 (standard); before Zurich Patch 11; before Zurich Patch 12; before Australia Patch 2 Hot Fix 3; before Australia Patch 3 Hot Fix 2; before Australia Patch 3m; before Australia Patch 4; before Australia Patch 5 Fixed in Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b, Yokohama Patch 13 Hot Fix 4, Zurich Patch 7b Hot Fix 3, Zurich Patch 8 Hot Fix 5, Zurich Patch 9 Hot Fix 6, Zurich Patch 10 Hot Fix 2m (m-branch), Zurich Patch 10 Hot Fix 3 (standard), Zurich Patch 11, Zurich Patch 12, Australia Patch 2 Hot Fix 3, Australia Patch 3 Hot Fix 2, Australia Patch 3m, Australia Patch 4, Australia Patch 5 Patch available CNA

Remediation

  • Fix · CNA ServiceNow AI Platform (ServiceNow) Fixed in Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b, Yokohama Patch 13 Hot Fix 4, Zurich Patch 7b Hot Fix 3, Zurich Patch 8 Hot Fix 5, Zurich Patch 9 Hot Fix 6, Zurich Patch 10 Hot Fix 2m (m-branch), Zurich Patch 10 Hot Fix 3 (standard), Zurich Patch 11, Zurich Patch 12, Australia Patch 2 Hot Fix 3, Australia Patch 3 Hot Fix 2, Australia Patch 3m, Australia Patch 4, Australia Patch 5

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    ServiceNow AI Platform Australia Patch 2 Hot Fix 3, Australia Patch 3 Hot Fix 2 and 13 more versions

    4 records Highest priority Priority MEDIUM 4 MEDIUM

    Other records, highest priority first

    • TI-2026-15447 Unauthenticated Remote Code Execution in GraphQL Composite Data APIPriority MEDIUM 59
    • TI-2026-52569 Unauthenticated SQL Injection via Dynamic Schema ORDER BY ClausePriority MEDIUM 57
    • TI-2026-15448 Unauthenticated Privilege Escalation via System Configuration Image Upload ProcessorPriority MEDIUM 57
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-6876
  2. 2026-10-03 Alias added: GHSA-7fw9-72q7-3g7j
  3. 2026-11-04 EPSS moved to the 50th–90th percentile

References

Other 1

  • TI-2024-04841 Incomplete Input Validation in GlideExpression Script KEVCVSS 4.0CRITICAL 9.2
  • TI-2024-04536 Jelly Template Injection Vulnerability in ServiceNow UI Macros KEVCVSS 4.0CRITICAL 9.3
  • TI-2025-11396 Unauthenticated Privilege Escalation in ServiceNow AI Platform CVSS 4.0CRITICAL 9.3
  • TI-2026-15447 Unauthenticated Remote Code Execution in GraphQL Composite Data API CVSS 4.0CRITICAL 10.0
  • TI-2026-52569 Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause CVSS 4.0CRITICAL 10.0
  • TI-2026-15448 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor CVSS 4.0CRITICAL 10.0
See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences