ServiceNow has patched four vulnerabilities in the Now Platform and the AI Platform. Three of them are rated critical. In all cases, an unauthenticated attacker could, under certain circumstances, execute code, modify data, or escalate privileges. Self-hosted users must apply the patches themselves.
On August 27, ServiceNow published four CVEs: CVE-2026-6876, CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820. The company states that it discovered all four issues through its own security research and via the responsible disclosure program, and that it resolved them independently of one another. Researchers are permitted to make their findings public, which means technical details may surface shortly.
Three of the four vulnerabilities are in the AI Platform, the layer on which ServiceNow builds its agent-based AI functionality. The fourth affects the underlying Now Platform.
What the four vulnerabilities do
CVE-2026-6876 is a sandbox escape in the Now Platform, rated as “high” by ServiceNow based on the CVSS v4.0 calculator. An unauthenticated user can exploit it to execute arbitrary code within the platform, resulting in more access than intended.
The other three are critical. CVE-2026-18885 and CVE-2026-18886 are both code injection vulnerabilities in the AI Platform. The first allows code execution and access to or modification of instance data; the second leads to the creation or modification of data and, consequently, to privilege escalation. CVE-2026-74820 is an SQL injection vulnerability that allows an attacker to execute arbitrary SQL statements against the database associated with the instance.
Which versions have been patched
Users participating in the ServiceNow Patching Program have automatically received the update. ServiceNow recommends comparing your instance version with the published list. This list includes, among others, Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b and Patch 13 Hot Fix 4, various Zurich patches up to and including Patch 12, and Australia Patch 2 Hot Fix 3 through Patch 5.
For self-hosted environments, the user is responsible. ServiceNow recommends that this group apply the updates promptly or upgrade to a patched release.
Tip: ServiceNow autonomous security update addresses vulnerabilities