Authorization Bypass Vulnerability in ServiceNow AI Platform

CVE-2026-86857

What is CVE-2026-86857?

An issue has been identified in the ServiceNow AI Platform that allows unauthorized access to sensitive data. This vulnerability enables an authenticated user to bypass permissions, resulting in potential access to information that should be restricted. ServiceNow has addressed this issue with an update for all hosted instances and distributed patches to partners and self-hosted customers. It is vital for users to apply these updates promptly to safeguard their data and maintain security integrity.

References