CVE-2026-6875: Sandbox Escape in ServiceNow AI Platform
- Is it exploited?
Reported, not confirmed by CISA. VulnCheck KEV lists it as exploited in the wild. CISA has not added it to its Known Exploited Vulnerabilities catalog as of .
VulnCheck KEV lists it since . It cites 3 public reports, the first from .
- How likely is exploitation in the next 30 days?
- 1.4%
EPSS score, percentile 72.9 of all scored records. A probability estimated by FIRST, not a report of exploitation.
- How severe?
- 9.5 Critical
CVSS v4.0 base score, given by the CNA
- What should I do?
CISA has set no required action, because the vulnerability is not in KEV.
The CVE record links no vendor advisory, patch or mitigation.
- Which versions are affected?
Affected
- before Australia Patch 2
- before Yokohama Patch 12 Hot Fix 1b
- before Yokohama Patch 13
- before Zurich Patch 7b
- before Zurich Patch 9
- unspecified
and 1 more in the table below
Source: CISA KEV 2026.10.29, as of ; VulnCheck KEV, as of ; FIRST EPSS, as of ; CVE List, as of . About the data.
Description
Sandbox Escape in ServiceNow AI Platform
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform. ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners. Further, the vulnerability is addressed in the listed patches and family releases, which have been made available to hosted and self-hosted customers, as well as partners. We are not currently aware of exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
Source: CVE List, as of . About the data.
What to do
Advisories and patches
The CVE record links no vendor advisory, patch or mitigation.
This summary is based on the CVE record as of . Check the vendor's advisory before you act: affected versions and fixes can change.
Affected products and versions
Versions by product, as listed in the CVE record (1 product)
| Status | Versions |
|---|---|
| Affected | before Australia Patch 2 |
| Affected | before Yokohama Patch 12 Hot Fix 1b |
| Affected | before Yokohama Patch 13 |
| Affected | before Zurich Patch 7b |
| Affected | before Zurich Patch 9 |
| Affected | unspecified |
| Affected | unspecified |
Versions not listed are: unaffected.
Source: CVE List, as of . About the data.
Weakness
CWE-94
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE and CAPEC are maintained by MITRE; the entries are those named in the CVE record.
Timeline
| Date | Event |
|---|---|
| CVE record published | |
| CVE record last updated |
References
1
Known exploited ServiceNow vulnerabilities
- CVE-2024-4879: ServiceNow Improper Input Validation Vulnerability
- CVE-2024-5217: ServiceNow Incomplete List of Disallowed Inputs Vulnerability