CVE-2026-103093criticalCWE-284

CVE-2026-103093: fallo crítico en ServiceNow AI Platform

Sandbox Escape via Table Rotation in ServiceNow AI Platform

Publicada el

Seguir esta CVE+ Monitorear ServiceNow AI Platform

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.4epss 0.4%
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Productos afectados
ServiceNow · ServiceNow AI Platform
CVEs relacionadas — ServiceNow AI Platform

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-18885CRITICALUnauthenticated Remote Code Execution in GraphQL Composite Data APIEPSS 7.2%CVE-2026-74820CRITICALUnauthenticated SQL Injection via Dynamic Schema ORDER BY ClauseEPSS 5.1%CVE-2026-18886CRITICALUnauthenticated Privilege Escalation via System Configuration Image Upload ProcessorEPSS 5.0%CVE-2026-6875CRITICALSandbox Escape in ServiceNow AI PlatformEPSS 1.4%CVE-2026-6876CRITICALSandbox Escape in ServiceNow AI PlatformEPSS 0.7%CVE-2026-0542CRITICALRemote Code Execution in ServiceNow AI PlatformEPSS 0.7%