Do Son 
TL;DR
ServiceNow published security updates on October 29, 2026, addressing three security issues in its cloud ecosystem. These ServiceNow vulnerabilities include a critical sandbox escape flaw in the ServiceNow AI Platform alongside information disclosure and authorization bypass bugs. Administrators should apply the latest platform hotfixes immediately to prevent unauthorized host operating system access.
- Product: ServiceNow AI Platform
- Vulnerabilities: 3 flaws (CVE-2026-103093, CVE-2026-103094, CVE-2026-6877)
- Highest severity: 9.4 (Critical · CVSSv4)
- Worst impact: Sandbox Escape via Table Rotation in
- Status: No confirmed exploitation yet; patches available
- Action: Update to Yokohama Patch 13 Hot Fix 4a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 12, Zurich Patch 13 (+9) now
| CVE | CVSS (CVSSv4) | Type | Fixed in | Status |
|---|---|---|---|---|
| CVE-2026-103093 | 9.4 | Sandbox Escape via Table Rotation in | Yokohama Patch 13 Hot Fix 4a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 12 (+2) | Not exploited |
| CVE-2026-103094 | 7.1 | Cleartext Storage of OAuth Credentials in | Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 13 Hot Fix 4a, Zurich Patch 10 Hot Fix 3a (+8) | Not exploited |
| CVE-2026-6877 | 5.3 | Domain Separation Bypass in | SR - CSM - Task Plan Templates v3.0 (Task Plan Templates application) | Not exploited |
Why It Matters
ServiceNow provides enterprise workflow automation to approximately 85 percent of the Fortune 500. While exact affected installation counts are not specified in the advisory, thousands of organizations rely on the platform daily.
According to the official ServiceNow security advisory (KB3228994), “ServiceNow did not identify evidence of malicious exploitation related to these issues.” Furthermore, no public proof-of-concept exploit code currently exists. However, unpatched ServiceNow vulnerabilities risk host takeover and data leakage across multi-tenant environments.
How the Attack Works
The advisory details three distinct vulnerabilities found through internal testing and bug bounty reports.
First, CVE-2026-103093 (PRB2112567) is a critical sandbox escape in the ServiceNow AI Platform. As ServiceNow states, “This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access.”
Second, CVE-2026-103094 (PRB2112601) is a high-severity information disclosure bug. The vendor explains that “This vulnerability could cause a user’s plaintext password to be persisted in a system table, potentially exposing that password to a user who otherwise would not be entitled to view it.”
Finally, CVE-2026-6877 (PRB2112618) is a medium-severity domain separation bypass in the SR – CSM – Task Plan Templates Store application. This flaw enables authenticated users with specific roles to create records across domain boundaries.
Affected Versions
These ServiceNow vulnerabilities affect the ServiceNow AI Platform across Yokohama, Zurich, and Australia release families. Meanwhile, CVE-2026-6877 affects Task Plan Templates versions 2.0.0 and earlier.
Patch and Mitigation Steps
ServiceNow patched the AI Platform vulnerabilities in Yokohama (Patch 13 Hotfix 4a/5a), Zurich (Patch 10 Hotfix 3b/4b), and Australia (Patch 5). Additionally, customers using Task Plan Templates must upgrade to version 3.0.0 or higher. Alternatively, users can install release 2.0.1 through recent Australia patches.
Support Our Threat Intelligence
Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
