Skip to content
OpenAdvisories
High WID-SEC-2026-4252 3 CVEs

ServiceNow AI Platform: Mehrere Schwachstellen

Published Oct 29, 2026 · Updated Oct 29, 2026 · de-DE

Vendor: ServiceNow Product: AI Platform

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in ServiceNow AI Platform ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren oder offenzulegen.

Product

Die ServiceNow AI Platform ist eine Sammlung von KI-gestützten Funktionen, die in die ServiceNow-Plattform integriert sind, um Arbeitsabläufe zu automatisieren und Entscheidungen zu verbessern.

Vulnerabilities 3

  • Critical 9.4
    CVE-2026-103093

    Sandbox Escape via Table Rotation in ServiceNow AI Platform

    ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the under…

    ServiceNow ServiceNow AI Platform
  • High 7.1
    CVE-2026-103094

    Cleartext Storage of OAuth Credentials in ServiceNow AI Platform

    ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password to be persisted in a system table, potentially exposing that password to a user who…

    ServiceNow ServiceNow AI Platform
  • Medium 5.3
    CVE-2026-6877

    Domain Separation Bypass in ServiceNow AI Platform

    ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task Plan Templates Store application. This vulnerability could enable an authenticated user with a specific role to create records in domains …

    ServiceNow ServiceNow AI Platform

Revision history

  1. #1

    Initiale Fassung

References