ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

ServiceNow disclosed a security issue that could permit unauthenticated users, depending on platform release or instance configuration, to obtain greater-than-intended access to instances; the company applied a fix on June 5, 2026, observed anomalous activity and successful table queries against a subset of customers, and has notified impacted customers while the issue (no CVE assigned) was first discussed publicly on Reddit.