Improper Access Control in ServiceNow AI Platform

CVE-2026-18886

What is CVE-2026-18886?

An improper access control vulnerability was discovered in the ServiceNow AI platform, allowing an unauthorized user to potentially create or modify instance data beyond designated permissions. This issue could lead to privilege escalation, compromising the integrity of instance configurations. ServiceNow has issued a security update that addresses this vulnerability, and it is crucial for users to apply these updates promptly to safeguard their instances.

References