Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Co…

A critical unauthenticated code execution vulnerability (CVE-2026-6875, CVSS 9.5) in ServiceNow's AI Platform is being actively exploited in the wild. The flaw allows attackers to escape the sandbox and compromise entire ServiceNow instances and connected proxy servers; patches were released in June across multiple versions. If you're building on ServiceNow or selling to ServiceNow shops, your customers' instances are under active attack right now. Patch deployment is a hard deadline this week, and unpatched instances are completely compromised.