CVE-2026-86858: ServiceNow AI Platform Auth Bypass Flaw

CVE-2026-86858 Overview

ServiceNow has remediated an improper access control vulnerability in the ServiceNow AI Platform. The flaw allows an unauthenticated remote attacker, under certain circumstances, to create, modify, or delete instance data beyond the intended scope. The weakness is categorized under [CWE-284] (Improper Access Control) and affects the integrity of ServiceNow instances.

ServiceNow deployed a security update to hosted instances in August 2026 and provided the update to partners and self-hosted customers. The vendor has not reported any observed malicious exploitation at the time of disclosure.

Critical Impact
Unauthenticated attackers can tamper with instance data over the network without user interaction, undermining the integrity of ServiceNow AI Platform deployments.

Affected Products

ServiceNow AI Platform (hosted instances patched by ServiceNow in August 2026)
ServiceNow AI Platform (self-hosted customer deployments pending patch application)
ServiceNow partner-managed deployments

Discovery Timeline

August 2026 - ServiceNow deployed security update to hosted instances and distributed update to partners and self-hosted customers
2026-09-24 - CVE-2026-86858 published to NVD
2026-09-24 - Last updated in NVD database

Technical Details for CVE-2026-86858

Vulnerability Analysis

The vulnerability resides in access control enforcement within the ServiceNow AI Platform. Access decisions do not sufficiently validate the identity or authorization context of the requester. As a result, requests that should be rejected are instead processed against instance data.

The CVSS vector indicates network-reachable exploitation with no authentication or user interaction required. Impact is scoped to integrity: confidentiality and availability are not directly affected based on the published metrics. An attacker who successfully exploits the flaw can create, modify, or delete records on the targeted instance.

Because ServiceNow instances typically act as systems of record for IT service management, HR, security operations, and workflow automation, unauthorized data manipulation can propagate into downstream business processes. Tampered configuration items, workflow records, or AI Platform artifacts may influence automated decisions.

Root Cause

The root cause is improper access control [CWE-284] in the ServiceNow AI Platform. Authorization checks on affected endpoints or operations fail to enforce the expected policy, enabling unauthenticated callers to invoke data-modifying actions. ServiceNow has not disclosed the specific component or API path.

Attack Vector

Exploitation occurs over the network against a reachable ServiceNow instance. The attacker does not need valid credentials, user interaction, or prior access. ServiceNow has stated the flaw is exploitable only "in certain circumstances," indicating conditional preconditions on the targeted instance configuration.

No verified proof-of-concept code is publicly available. See the ServiceNow Knowledge Base Article for vendor-provided technical details.

Detection Methods for CVE-2026-86858

Indicators of Compromise

Unexpected creation, modification, or deletion of records in sys_audit or table-level audit logs without a corresponding authenticated user context
API or REST endpoint requests to instance tables that lack a valid session token or authenticated principal
Anomalous spikes in write operations originating from external IP ranges to /api/now/table/* endpoints

Detection Strategies

Review ServiceNow transaction logs and audit records for write operations attributed to anonymous or system contexts that should require authentication
Baseline normal API call patterns per instance and alert on deviations in request volume, source IP, or endpoint usage
Correlate ServiceNow logs with upstream web application firewall and reverse proxy telemetry to identify unauthenticated POST, PUT, PATCH, and DELETE requests

Monitoring Recommendations

Forward ServiceNow audit, transaction, and REST API logs to a centralized SIEM for retention and correlation
Enable alerting on unauthorized changes to high-value tables such as sys_user, sys_user_role, and workflow configuration tables
Monitor outbound ServiceNow integrations for unexpected data pushes that may indicate manipulated workflow records

How to Mitigate CVE-2026-86858

Immediate Actions Required

Apply the August 2026 ServiceNow security update to all self-hosted instances if not already deployed
Confirm that hosted instances have received the vendor-deployed update by reviewing the ServiceNow Knowledge Base advisory
Audit recent instance data changes for unauthorized modifications, focusing on the window prior to patch deployment

Patch Information

ServiceNow has released patched versions of the AI Platform. Hosted customers received the fix automatically in August 2026. Self-hosted customers and partners must apply the update distributed by ServiceNow. Refer to the ServiceNow Knowledge Base Article KB3159623 for version details and upgrade guidance.

Workarounds

Restrict network exposure of ServiceNow instances using IP allow-listing or VPN-only access where business requirements permit
Place a web application firewall in front of the instance and block unauthenticated write methods to sensitive API paths until patching is complete
Review and tighten Access Control List (ACL) rules on tables accessible without authentication

bash

# Example WAF rule concept: block unauthenticated write methods to ServiceNow REST API
# Replace with syntax appropriate for your WAF platform
if request.method in ["POST", "PUT", "PATCH", "DELETE"] \
   and request.path matches "^/api/now/" \
   and not request.headers.contains("Authorization"):
    action: block
    log: true