ServiceNow has released urgent security updates to address five major vulnerabilities in its AI Platform, two of which are classified as critical. These flaws could enable both authenticated and unauthenticated attackers to access, alter, or extract sensitive instance data. The affected versions reportedly come from internal security testing, customer reports, disclosures from outside researchers, and its bug bounty program. Organizations using ServiceNow—especially those self-hosting—are urged to verify their versions and deploy available patches without delay.
Highlights of the Critical Flaws
The most severe issue, tracked as CVE-2026-13016, is a SQL injection vulnerability. In certain configurations, it enables unauthenticated users to execute arbitrary SQL commands on the backend database of affected instances. Such access could expose or corrupt data involved in enterprise workflows like IT services, security incident responses, asset records, or HR requests.
The second critical flaw, CVE-2026-86860, involves missing authorization controls. This vulnerability may allow unauthenticated attackers to retrieve data beyond established access boundaries, potentially pulling in sensitive information that should remain off-limits.
Other High-Risk Flaws and Scope
Three additional high-severity issues include: CVE-2026-86857, which lets authenticated users see data they aren’t supposed to; CVE-2026-86858, which could let unauthenticated attackers alter, delete, or create records outside permissible access; and CVE-2026-86859, another authorization bypass for data access by unauthenticated users. Each of these could undermine data integrity or workflow reliability.
ServiceNow’s patch advisory (KB3159623) indicates there is no current evidence that attackers have exploited any of these flaws in the wild. Nonetheless, the company warns that environments exposed to the internet—or those processing sensitive data—are especially vulnerable and should act swiftly.
Patching Roll-Outs and Remediation Advice
Self-hosted customers have several patched releases available. Key fixes include Yokohama Patch 13 Hot Fix 5a; Zurich Patch 10 Hot Fix 4a W32; and Australia Patch 2 Hot Fix 4b W32. Additional updates cover Zurich Patch 10 Hot Fix 3b, Zurich Patch 11 Hot Fix 3, Australia Patch 4 Hot Fix 3, and Australia Patch 5. Users should cross-check their version and apply the relevant patches immediately.
After applying updates, organizations should audit admin privileges, monitor for anomalous database queries, watch for unexpected data modifications, and verify that access controls are functioning correctly. These steps help detect potential post-patch misconfigurations or attempted exploitation.
These vulnerabilities strike at the heart of authorization and access control—core to any security posture. The critical nature of the flaws and the potential scale of damage to data confidentiality and integrity make them a top-tier threat. What to watch for: whether threat actors have started probing for these bugs in public scans, whether ServiceNow’s customer base has legacy versions still unpatched, and whether third-party tools or integrations introduce compounding risk. The faster orgs act, the better they’ll defend their AI workflows, IT assets, and sensitive records.
