Information Disclosure Vulnerability in ServiceNow AI Platform

CVE-2026-103094

What is CVE-2026-103094?

An information disclosure vulnerability has been detected in the ServiceNow AI Platform, allowing potential exposure of user plaintext passwords. This issue arises due to the failure to adequately secure the persistence of credentials in a system table. If exploited, unauthorized users may gain access to sensitive login information. ServiceNow has issued security updates to remediate this vulnerability and strongly advises affected users to apply these updates or upgrade to a patched version to ensure the integrity of their systems.

References