ServiceNow AI Platform Sandbox Escape Enables Unauthenticated RCE
CVE-2026-6875 exposes a critical sandbox escape flaw in the ServiceNow AI Platform, allowing completely unauthenticated attackers to execute arbitrary code via a publicly accessible endpoint. The vulnerability is particularly severe because it requires no credentials, dramatically lowering the barrier for exploitation and widening the potential attacker pool to virtually anyone with network access. Patches were available from ServiceNow throughout June, meaning organizations that delayed applying them left a critical internet-facing business platform exposed during an active exploitation window. This incident underscores that enterprise SaaS platforms and AI-integrated tools carry the same patch urgency as traditional infrastructure, and that pre-authentication attack surfaces demand the highest prioritization in vulnerability triage.
Tactical Insight
Immediate actions
- Apply ServiceNow's June patches immediately, or isolate affected instances from public internet access until patching is complete.
- Audit all publicly exposed ServiceNow endpoints (including `/assessment_thanks.do`) and restrict access via IP allowlisting or WAF rules.
- Search logs for anomalous HTTP POST requests to `/assessment_thanks.do` from untrusted or external IP addresses to identify potential compromise.
Long-term improvements
- Establish an SLA-driven emergency patching process that mandates critical patch deployment within 24–72 hours for internet-facing platforms.
- Maintain a continuously updated inventory of all SaaS and cloud platform instances, including version and patch status, to reduce blind spots.
- Implement network segmentation and zero-trust access controls to limit lateral movement in the event a SaaS platform is compromised.
Detection measures
- Deploy a Web Application Firewall (WAF) with rules targeting unauthenticated POST requests to known vulnerable endpoints.
- Configure SIEM alerting for unusual code execution activity or anomalous API calls originating from ServiceNow instances.
- Subscribe to ServiceNow's security advisories and threat intelligence feeds to receive real-time notification of newly disclosed CVEs.