Sandbox Escape Vulnerability in ServiceNow AI Platform
CVE-2026-103093

9.4CRITICAL

Key Information:

Vendor

Servicenow

Status
Servicenow Ai Platform
Vendor
CVE Published:
29 October 2026

What is CVE-2026-103093?

A security issue has been identified in the ServiceNow AI Platform that allows authenticated users with admin roles to bypass Rhino sandbox restrictions. This vulnerability can lead to the execution of arbitrary code on the underlying host operating system, posing a risk of unintended access. ServiceNow has released updates to remediate this issue, and impacted customers are strongly advised to apply the recommended updates to safeguard their systems.

Affected Version(s)

ServiceNow AI Platform 0

ServiceNow AI Platform 0

ServiceNow AI Platform 0

References

https://support.servicenow.com/kb?id=kb_article_view&sysp...

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.