Read the docs
TI-2026-82727 Aliases CVE-2026-103093GHSA-7xg6-pvqc-rx7p

Sandbox escape in ServiceNow AI Platform allows host code execution

Priority MEDIUM 43CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

ServiceNow AI Platform versions before the fixed releases listed in the solution are affected by an improper access control flaw (CWE-284). An authenticated user with the admin role can bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, which may enable further unintended access. ServiceNow is not currently aware of malicious exploitation against its instances.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00429 37th percentileScored 2026-11-07
Fix Fixed ServiceNow AI Platform (ServiceNow): Yokohama Patch 13 Hot Fix 4a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 12 +2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ServiceNowServiceNow AI Platformbefore Yokohama Patch 13 Hot Fix 4a; before Zurich Patch 10 Hot Fix 3b; before Zurich Patch 12; before Zurich Patch 13; before Australia Patch 5Yokohama Patch 13 Hot Fix 4a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 12, Zurich Patch 13, Australia Patch 5Patch availableCNA
  • ServiceNow AI Platform VendorServiceNow Affected before Yokohama Patch 13 Hot Fix 4a; before Zurich Patch 10 Hot Fix 3b; before Zurich Patch 12; before Zurich Patch 13; before Australia Patch 5 Fixed in Yokohama Patch 13 Hot Fix 4a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 12, Zurich Patch 13, Australia Patch 5 Patch available CNA

Remediation

Apply the fixed release for your branch: Yokohama Patch 13 Hot Fix 4a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 12, Zurich Patch 13, or Australia Patch 5. ServiceNow deployed the update to hosted instances and provided it to partners and self-hosted customers.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

  • Fix · CNA ServiceNow AI Platform (ServiceNow) Fixed in Yokohama Patch 13 Hot Fix 4a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 12, Zurich Patch 13, Australia Patch 5

Timeline

  1. 2026-10-29 Threatist record created from CVE-2026-103093
  2. 2026-10-29 CISA SSVC decision points changed
  3. 2026-10-29 Alias added: GHSA-7xg6-pvqc-rx7p

References

Other 1

  • TI-2024-04841 Incomplete Input Validation in GlideExpression Script KEVCVSS 4.0CRITICAL 9.2
  • TI-2024-04536 Jelly Template Injection Vulnerability in ServiceNow UI Macros KEVCVSS 4.0CRITICAL 9.3
  • TI-2025-11396 Unauthenticated Privilege Escalation in ServiceNow AI Platform CVSS 4.0CRITICAL 9.3
  • TI-2026-15447 Unauthenticated Remote Code Execution in GraphQL Composite Data API CVSS 4.0CRITICAL 10.0
  • TI-2026-52569 Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause CVSS 4.0CRITICAL 10.0
  • TI-2026-15448 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor CVSS 4.0CRITICAL 10.0
See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences