CVE-2026-86857 Overview
ServiceNow has remediated an authorization bypass vulnerability in the ServiceNow AI Platform. The flaw allows an authenticated user to access data within the platform that they would not otherwise be entitled to view. Successful exploitation could enable further unintended access across the affected instance.
ServiceNow has deployed updates to hosted instances and provided fixes to partners and self-hosted customers. The vendor is not currently aware of malicious exploitation. The weakness is tracked as a Missing Authorization issue [CWE-862].
Critical Impact
An authenticated attacker with low privileges can bypass authorization controls to access restricted data within the ServiceNow AI Platform, potentially pivoting to additional unauthorized access across the instance.
Affected Products
- ServiceNow AI Platform (hosted instances)
- ServiceNow AI Platform (self-hosted deployments)
- ServiceNow partner-managed deployments
Discovery Timeline
- 2026-09-24 - CVE CVE-2026-86857 published to the National Vulnerability Database (NVD)
- 2026-09-25 - Last updated in NVD database
Technical Details for CVE-2026-86857
Vulnerability Analysis
The vulnerability is an authorization bypass in the ServiceNow AI Platform. ServiceNow has not published low-level technical details in the public advisory. According to the vendor advisory, an authenticated user can access data within the platform that falls outside their assigned entitlements.
Because the ServiceNow AI Platform underpins workflow, data, and AI capabilities for enterprise customers, unauthorized data access can expose business records, workflow metadata, and AI model inputs. The vendor notes that initial access can enable further unintended access, suggesting the flaw may serve as a stepping stone for broader data exposure.
The weakness is classified under Missing Authorization [CWE-862], indicating the affected component failed to verify that the requesting user held the required permissions before returning data.
Root Cause
The root cause is a missing or insufficient authorization check within a ServiceNow AI Platform component. ServiceNow has not disclosed the specific module, API endpoint, or table involved. The vendor advisory published through the ServiceNow Knowledge Base is the authoritative source for component-level details.
Attack Vector
Exploitation requires an authenticated account on the target ServiceNow instance. The attacker interacts with the AI Platform over the network and does not need user interaction or elevated privileges beyond standard low-privilege access. No public proof-of-concept is available, and the vendor reports no observed in-the-wild exploitation.
No verified exploit code is available for this vulnerability. Refer to the ServiceNow Knowledge Base Article for vendor-provided remediation details.
Detect Identity Attacks the Moment Authentication Fails
Singularity™ Identity surfaces credential misuse, lateral movement, and privilege escalation in real time, so you can contain the breach before it spreads.
Stop Identity AttacksDetection Methods for CVE-2026-86857
Indicators of Compromise
- Unexpected access to AI Platform records by accounts without matching role assignments or data entitlements.
- Spikes in API or UI requests to AI Platform endpoints from a single authenticated session.
- Audit log entries showing successful read operations against tables the user has no documented need to access.
Detection Strategies
- Review ServiceNow sys_audit and sysevent logs for unusual read activity against AI Platform data stores.
- Correlate authenticated session activity with the user's assigned roles and data policy scopes to flag mismatches.
- Baseline normal AI Platform usage per role and alert on deviations in query volume or record counts returned.
Monitoring Recommendations
- Enable and forward ServiceNow instance logs to a centralized SIEM for continuous review of authorization events.
- Monitor for repeated access attempts against the same AI Platform component across short time windows.
- Track administrative actions and role changes that occurred before any suspicious data access events.
How to Mitigate CVE-2026-86857
Immediate Actions Required
- Apply the ServiceNow-provided update to hosted, partner-managed, and self-hosted instances as described in the vendor Knowledge Base article.
- Audit recent AI Platform access logs for authenticated users that interacted with data outside their role assignments.
- Review and tighten role assignments and Access Control Lists (ACLs) applied to AI Platform tables and APIs.
Patch Information
ServiceNow has deployed the fix to hosted instances and distributed the update to partners and self-hosted customers. Customers should confirm their instance version matches the patched release referenced in the ServiceNow Knowledge Base Article.
Workarounds
- No formal workaround has been published by ServiceNow. Applying the vendor update is the recommended remediation.
- As a compensating control, restrict AI Platform access to a reduced set of trusted users until patching is confirmed.
- Enforce least-privilege role assignments and remove unused or over-provisioned accounts from the instance.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
