CyberRota Analysis
AI-GeneratedAn improper access control vulnerability in the ServiceNow AI platform allows unauthenticated users to create or modify instance data, potentially leading to privilege escalation. Organizations using ServiceNow should prioritize applying the latest security updates to mitigate this critical risk, as it poses significant threats to data integrity and system security. Immediate action is essential to protect against potential exploitation, even though no active attacks have been reported.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.