A flaw in the ServiceNow AI Platform’s dynamic schema ORDER BY clause permits an unauthenticated user to inject arbitrary SQL code, a classic example of CWE‑89. The injected code executes with the application’s database privileges, allowing the attacker to read, modify, or delete any data stored in the underlying database. This can expose sensitive information and corrupt business-critical data without authorization.

All installations of the ServiceNow AI Platform that have not applied the vendor’s security update are potentially vulnerable. Version specifics were not disclosed in the advisory, so any unpatched deployment is considered at risk.

The CVSS score of 10 categorises the flaw as critical. Although no public exploitation has been reported and it is not listed in CISA’s KEV catalogue, the EPSS figure of 5% indicates a low but non‑zero probability of attack. Attackers would only need network reach to the exposed AI Platform interface – which currently allows unauthenticated requests – to inject malicious SQL and gain unauthorized database access.