Three Critical ServiceNow Platform Vulnerabilities Could Allow Arbitrary Execution, Privilege Escalation
Three Critical ServiceNow Platform Vulnerabilities Could Allow Arbitrary Execution, Privilege Escalation
Summary
On August 27, 2026, ServiceNow published a security advisory disclosing four vulnerabilities in its AI and Now Platforms. Three of the flaws are rated CVSS 4.0 10.0 (Critical), and each can be exploited by an unauthenticated attacker under certain circumstances to execute arbitrary code, escalate privileges, or run arbitrary SQL against the underlying database on the AI Platform. The fourth is a High-severity sandbox escape on the Now Platform rated CVSS 8.7. Because these vulnerabilities allow network-based attacks with no privileges and no user interaction, they pose a severe risk to enterprise environments that use ServiceNow, though ServiceNow has stated that these vulnerabilities were identified and remediated internally, and it is not currently aware of any in-the-wild exploitation of these vulnerabilities. No public exploit code has been identified at time of writing.
Affected Systems and/or Applications
The following ServiceNow releases are affected:
Hosted (SaaS) instances enrolled in ServiceNow’s Patching Program have already received the security updates automatically. Self-hosted and on-premises customers must apply the relevant patches manually.
Technical Details
CVE-2026-18885: Code Injection in GraphQL Composite Data API (CVSS 10.0)
This is a code injection vulnerability in the ServiceNow AI Platform’s GraphQL Composite Data API. Under certain circumstances, an unauthenticated attacker can exploit the flaw to execute arbitrary code within the ServiceNow platform and gain access to, or modify, instance data beyond the intention of the platform.
CVE-2026-18886: Improper Access Control in System Configuration Image Upload Processor (CVSS 10.0)
This vulnerability resides in the ServiceNow AI Platform’s System Configuration Image Upload Processor. The processor fails to enforce intended authorization boundaries under certain circumstances, allowing an unauthenticated attacker to create or modify ServiceNow instance data beyond what was intended, resulting in privilege escalation. The flaw is exploitable only in scenarios where unauthenticated access paths are available for image uploads; where such paths are not exposed, the risk is mitigated. Because many organizations customize self-service portals and external-facing interfaces that allow file uploads, this condition may be common in production environments.
CVE-2026-74820: SQL Injection via Dynamic Schema ORDER BY Clause (CVSS 10.0)
This is an unauthenticated SQL injection vulnerability in the ServiceNow AI Platform, specifically through a dynamic schema ORDER BY clause. An attacker can manipulate the clause to execute arbitrary SQL statements against the instance’s underlying database. This provides a direct path to exfiltration of highly sensitive enterprise records stored in the ServiceNow database, as well as the ability disrupt database integrity.
CVE-2026-6876: Sandbox Escape in Now Platform (CVSS 8.7)
This vulnerability is a sandbox escape in the Now Platform. ServiceNow’s advisory text states that the issue could allow an unauthenticated user to execute arbitrary code within the platform, potentially leading to unintended access. However, the CVSS 4.0 vector assigned by ServiceNow includes the metric PR:L (Privileges Required: Low), which indicates that a low-privileged authenticated user may be required to trigger the flaw, rather than a fully unauthenticated attacker.
Mitigation
- Apply patches immediately. ServiceNow has released fixes for all supported releases. Consult the table under the "Affected Systems and/or Applications" section above, or in ServiceNow's advisory notification.
- Verify SaaS instance updates. Customers using hosted ServiceNow instances should confirm that the automatic security update has been applied and that the instance is running a patched version.
- Restrict unauthenticated upload paths. For CVE-2026-18886, if your environment exposes unauthenticated image upload functionality, restrict or disable these paths at least until patching is complete.
- Monitor for exploitation indicators. Review web access logs, GraphQL API query logs, database query logs, and system logs for suspicious patterns:
- Unexpected GraphQL composite queries from anonymous sessions
- Anomalous image uploads to system configuration processors
- Database queries with unusual
ORDER BYconstructs - Sandbox escape or script execution anomalies in the Now Platform
- Enforce network segmentation and WAF rules. Where possible, place ServiceNow instances behind web application firewalls (WAFs) and restrict network access to trusted administrative endpoints. While WAFs may not fully block a sophisticated SQL injection or code injection attempt, they can raise the attack barrier and provide logging.
- Initiate emergency change management. Given the CVSS 10.0 severity and unauthenticated attack vector, treat patching as an emergency change with expedited testing and deployment timelines.
.webp)