Description
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access.



ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
Published: 2026-10-29
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

This vulnerability allows an authenticated administrator in the ServiceNow AI Platform to escape the Rhino sandbox and execute arbitrary code on the underlying host operating system. By doing so, an attacker can potentially gain full control of the host and expand their foothold within the network. The flaw stems from insecure configuration of the sandbox environment and is classified as CWE-284 (Improper Access Control).

Affected Systems

The affected software is the ServiceNow AI Platform. No specific version numbers were listed in the advisory, but the issue has been remediated in a patch released for both hosted and self‑hosted instances. All installations of the AI Platform should be assumed vulnerable until the patch is applied.

Risk and Exploitability

The CVSS score of 9.4 indicates a critical severity, and the vulnerability is exploitable by users who possess the admin role, making the attack vector internal but privileged. Although EPSS data is not available and the flaw is not listed in CISA KEV, the high CVSS combined with an authenticated attacker suggests a strong potential for serious damage if the patch is not applied.

Generated by OpenCVE AI on October 29, 2026 at 20:13 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the official update released by ServiceNow for the AI Platform immediately.
  • Restrict or remove the admin role from users who do not require it to limit the exploit surface.
  • Continuously monitor system logs for signs of privilege abuse and ensure the Rhino sandbox is correctly configured.

Generated by OpenCVE AI on October 29, 2026 at 20:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 29 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 29 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Servicenow
Servicenow servicenow Ai Platform
Vendors & Products Servicenow
Servicenow servicenow Ai Platform

Thu, 29 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Description ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
Title Sandbox Escape via Table Rotation in ServiceNow AI Platform
Weaknesses CWE-284
References
Metrics cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Subscriptions

Servicenow Servicenow Ai Platform
cve-icon MITRE

Status: PUBLISHED

Assigner: SN

Published:

Updated: 2026-10-29T20:36:53.393Z

Reserved: 2026-09-30T02:00:19.719Z

Link: CVE-2026-103093

cve-icon Vulnrichment

Updated: 2026-10-29T20:36:42.987Z

cve-icon NVD

Status : Received

Published: 2026-10-29T19:17:15.113

Modified: 2026-10-29T21:17:08.327

Link: CVE-2026-103093

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-29T20:30:18Z

Weaknesses