Full Report
Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox escape vulnerability that could allow an unauthenticated user to run arbitrary code. Patches for the flaw were
Analysis Summary
# Vulnerability: ServiceNow AI Platform Sandbox Escape
## CVE Details
- **CVE ID:** CVE-2026-6875
- **CVSS Score:** 9.5 (Critical)
- **CWE:** Sandbox Escape / Unauthenticated Remote Code Execution (RCE)
## Affected Systems
- **Products:** ServiceNow AI Platform
- **Versions:**
- Versions prior to Brazil EA and Brazil GA
- Australia (versions prior to Patch 2)
- Zurich (versions prior to Patch 7b and Patch 9)
- Yokohama (versions prior to Patch 12 Hot Fix 1b and Patch 13)
- **Configurations:** Impacts self-hosted instances and instances with connected proxy servers.
## Vulnerability Description
CVE-2026-6875 is a critical sandbox escape vulnerability. It allows an unauthenticated user to bypass security restrictions within the AI Platform's execution environment. By escaping the sandbox, an attacker can transition from a restricted context to executing arbitrary code on the underlying system. The flaw is rooted in how the platform handles specific pre-authentication requests, potentially leading to a full compromise of the ServiceNow instance and associated proxy infrastructure.
## Exploitation
- **Status:** Exploited in the wild; Proof-of-Concept (PoC) available.
- **Complexity:** Low (Targeting pre-authentication endpoints).
- **Attack Vector:** Network (Remote).
## Impact
- **Confidentiality:** High (Complete access to instance data).
- **Integrity:** High (Ability to run arbitrary code and modify systems).
- **Availability:** High (Potential for complete system takeover or disruption).
## Remediation
### Patches
ServiceNow released fixes in June 2026. Users should update to the following versions or later:
- Brazil EA and Brazil GA
- Australia Patch 2
- Zurich Patch 7b and Zurich Patch 9
- Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13
### Workarounds
- No specific software workarounds are provided in the article; immediate patching is the primary recommendation for self-hosted customers.
- ServiceNow is globally "enhancing instance security by severely restricting the type of code that can run in sandbox contexts."
## Detection
- **Indicators of Compromise:** Monitor for suspicious HTTP POST requests directed at the `"/assessment_thanks.do"` endpoint.
- **Detection Methods:** Inspect web server logs for unusual activity or "sandbox-escape gadgets" originating from unauthenticated sources at the aforementioned endpoint.
## References
- ServiceNow Security Advisory (KB3137947): hxxps://support.servicenow[.]com/kb?id=kb_article_view&sysparm_article=KB3137947
- Searchlight Cyber Research: hxxps://slcyber[.]io/research-center/smashing-the-servicenow-sandbox-pre-authentication-rce/
- Defused Cyber Intelligence: hxxps://x[.]com/defusedcyber/status/2078418391321219448