← Vulnerability feed

Vulnerability record · CVE-2025-12420 · published 12 January 2026

CVE-2025-12420: ServiceNow AI Platform unauthenticated user impersonation flaw

Servicenow · Now Assist Ai Agents

The ServiceNow AI Platform contains an execution-with-unnecessary-privileges flaw that lets an unauthenticated attacker impersonate another user and act with that user's entitlements. Because impersonation can reach any operation the victim account holds, the exposure is broad and the vendor has already shipped fixes to hosted and self-hosted instances.

9.3 CVSS 4.0 Critical EPSS 53% · top 1.1% CWE-250 · Execution with unnecessary privileges
9.3CVSS 4.0 base score
53%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update to  hosted instances in October 2025. Security updates have also been provided to ServiceNow self-hosted customers, partners, and hosted customers with unique configurations. Additionally, the vulnerability is addressed in the listed Store App versions. We recommend that customers promptly apply an appropriate security update or upgrade if they have not already done so.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

critical priorityUnauthenticated, network-reachable impersonation with high confidentiality, integrity, and availability impact plus a 98.9th percentile EPSS score warrants critical priority.

What it is

The ServiceNow AI Platform contains an execution-with-unnecessary-privileges flaw that lets an unauthenticated attacker impersonate another user and act with that user's entitlements. Because impersonation can reach any operation the victim account holds, the exposure is broad and the vendor has already shipped fixes to hosted and self-hosted instances.

Impact

An attacker gains the full permissions of whatever user they impersonate, enabling unauthorized reads, changes, or privileged actions across the platform.

Attack surface

Reachable over the network with no authentication and no user interaction, per the CVSS 4.0 vector (AV:N/PR:N/UI:N). The affected components are the Now Assist AI Agents and Virtual Agent API.

Exploitation

Not listed in CISA KEV and no public exploit reference is provided; EPSS is 0.53188 (98.9th percentile), indicating elevated predicted exploitation likelihood. The CVSS temporal metric E:P suggests proof-of-concept level exploit maturity at scoring time.

What to do

  • Apply the ServiceNow security update or upgrade immediately; hosted instances were patched in October 2025, so confirm your instance is current.
  • For self-hosted, partner, and uniquely configured hosted deployments, apply the vendor-provided update and update the listed Store App versions.
  • Restrict network access to the Virtual Agent API and Now Assist AI Agent endpoints to trusted sources until patching is verified.
  • Audit and reduce standing privileges on service and integration accounts so impersonation yields less.
  • Monitor for unexpected impersonation events and anomalous actions taken under other users' identities.

Detection

  • Alert on impersonation or 'sudo' style events where the acting identity differs from the authenticated session, especially from unauthenticated or anonymous sessions.
  • Baseline and monitor Virtual Agent API and Now Assist AI Agent calls for unusual source IPs, volumes, or privilege levels.
  • Review audit logs for actions performed by accounts that did not authenticate in the same window.
  • Track ServiceNow security advisories and instance patch levels to confirm remediation.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2587329 Vendor Advisory

Track CVE-2025-12420 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.6CVE-2025-40602SonicWall SMA1000 management console missing authorization privilege escalationThe SonicWall SMA1000 appliance management console (AMC) contains a local privilege escalation flaw caused by insufficient authorization, mapped to C…KEVEPSS 2.8%analysed9.8CVE-2024-38813VMware vCenter Server privilege escalation to root via crafted packetvCenter Server contains a privilege escalation flaw where a malicious actor with network access can send a specially crafted network packet to escala…KEVEPSS 17%analysed

Source: NIST National Vulnerability Database (record CVE-2025-12420), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.