Sandbox Escape: Critical 9.2 Severity RCE Flaw Unmasked in ServiceNow AI Platform
ID: a0aacfac-d4a8-5b08-b66e-c641b5c3bfd5
STIX ID: report--a0aacfac-d4a8-5b08-b66e-c641b5c3bfd5
Feed Name: securityonline.info
Threat Score
ServiceNow disclosed a critical unauthenticated remote code execution vulnerability in its AI sandbox (CVE-2026-0542, CVSSv4 9.2). ServiceNow deployed security updates to hosted customer instances on January 6, 2026, published fixes for self-hosted customers, and provided fixed-version release dates for affected releases; it reports no known exploitation in the wild and advises administrators to promptly apply the provided updates.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.