ServiceNow AI Platform Flaw Exploited in Attacks

Attackers are exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, allowing unauthenticated remote code execution via sandbox escape. Defused confirmed in-the-wild exploitation over the weekend. ServiceNow addressed the flaw in April for hosted instances and released patches for self-hosted instances on July 13th, but has not yet flagged active abuse.