Critical ServiceNow Code Execution Flaw Now Exploited in Attacks

2026-07-22

Threat Intelligence platform Defused reported that they have observed a recently disclosed vulnerability in the ServiceNow AI Platform being actively exploited. The vulnerability could allow unauthenticated attackers to escape the sandbox and execute code remotely within the ServiceNow platform. ServiceNow has denied that the vulnerability is being actively exploited.