CVE-2026-6875: ServiceNow AI platform unauthenticated remote code execution

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

critical priorityCVSS 4.0 score of 9.5 with unauthenticated network reachability and full confidentiality, integrity and availability impact makes this a critical patching priority despite no known exploitation.

What it is

ServiceNow addressed a remote code execution flaw in its AI platform that could let an unauthenticated user execute code within the platform under certain circumstances. The vulnerability is a code injection issue (CWE-94) with a CVSS 4.0 score of 9.5, so successful exploitation would be severe for any exposed instance. The record does not name specific affected versions or products beyond the ServiceNow AI platform.

Impact

An attacker could execute arbitrary code inside the ServiceNow platform, gaining control over platform functionality and potentially the data and integrations it touches. The CVSS vector shows high confidentiality, integrity and availability impact across both the vulnerable system and subsequent systems.

Attack surface

The flaw is network-reachable (AV:N) with no privileges required (PR:N) and no user interaction (UI:N), so it can be triggered directly over the network. The high attack complexity (AC:H) indicates exploitation depends on specific conditions, consistent with the vendor's 'in certain circumstances' wording.

Exploitation

No exploitation is known: the vendor states it is not aware of exploitation, the CVE is not in CISA KEV, and the sole reference carries no exploit tags. EPSS is very high (0.776, 99.5th percentile), suggesting elevated predicted likelihood despite the absence of observed attacks.

What to do

• Apply the ServiceNow security update or upgrade to a patched family release immediately; hosted instances were patched by ServiceNow, self-hosted customers and partners must act.
• Verify patch level against ServiceNow KB3137947 and confirm the instance is on a fixed release.
• Restrict network exposure of the ServiceNow AI platform to trusted networks and users where operationally possible.
• Monitor ServiceNow security advisories for updated affected-version and patch details, since the record does not list them.
• Review platform logs and integration credentials for signs of unexpected code execution or configuration changes.

Detection

• Hunt ServiceNow platform and web logs for anomalous requests to AI platform endpoints from unauthenticated or unexpected sources.
• Alert on unexpected script, code or configuration changes in the platform, especially outside change windows.
• Monitor for new or modified scheduled jobs, script includes and outbound connections from the instance.
• Correlate ServiceNow audit records with network egress to detect post-exploitation activity.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.