CVE-2026-86859 in AI Platform
Summary
by MITRE • 09/24/2026
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access, potentially enabling further unintended access.
ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 09/24/2026
A critical authorization bypass vulnerability was identified within the ServiceNow AI Platform, representing a significant flaw in access control mechanisms that governs how users interact with sensitive data and services. This security issue allows an unauthenticated user to circumvent standard authentication protocols and gain unauthorized access to resources that should be restricted based on identity verification or role-based permissions. The core technical flaw lies in the platform's failure to properly enforce authorization checks before processing requests directed at specific AI-related endpoints, effectively creating a gap where system integrity relies solely on network-level security rather than application-layer validation. This type of vulnerability is classically categorized under CWE-287, which describes Improper Authentication, and often overlaps with CWE-862, Missing Authorization, as the attacker bypasses both identity verification and subsequent permission checks to access protected data structures within the AI module.
The operational impact of this vulnerability extends beyond simple data exposure, potentially serving as a foothold for more sophisticated attacks against the broader ServiceNow instance. By accessing unauthorized data within the AI Platform, an adversary could extract sensitive information such as proprietary algorithms, training datasets, or configuration details that reveal internal architecture and security controls. This initial access can facilitate lateral movement across the environment, allowing the attacker to pivot from the isolated AI module into other critical business applications hosted on the same instance. The risk is compounded by the fact that the ServiceNow AI Platform often handles high-value intellectual property and customer data, making any unauthorized disclosure a severe compliance violation under standards such as GDPR or HIPAA if personal health information or personally identifiable information is involved.
ServiceNow has addressed this issue through a targeted security update deployed to hosted instances and distributed to partners for self-hosted deployments. The remediation likely involves hardening the API gateway logic, implementing stricter input validation, and ensuring that every request to AI-related endpoints undergoes rigorous authentication and authorization verification before execution. Despite the severity of the flaw, there are currently no known reports of malicious exploitation in the wild, which suggests either rapid patching by administrators or limited visibility into active attacks targeting this specific component. However, the absence of observed exploits does not negate the risk, as automated scanning tools frequently target such vulnerabilities to establish initial access for later-stage intrusions.
Organizations utilizing ServiceNow must prioritize applying these security updates immediately to mitigate the risk of unauthorized data access and potential system compromise. Administrators should verify that their instances are running a patched release version that includes fixes for this specific authorization bypass flaw. In addition to patching, it is advisable to review audit logs for any anomalous activity related to AI platform endpoints prior to the update, as attackers may have attempted exploitation during the window of vulnerability. Implementing additional network-level controls such as Web Application Firewalls can provide a temporary layer of defense by filtering out requests that exhibit patterns consistent with authorization bypass attempts while ensuring long-term compliance through regular security assessments and adherence to industry best practices for application security management.