CVE-2026-86859

Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform

No known exploitation. EPSS puts it in the 20th percentile. Fixed versions are out.

CVSS —Not scored EPSS percentile20th0.3% chance in 30 days CISA KEVNot listedNo confirmed exploitation
No public exploit known Fix1 product4 fixed builds listed below

Published 2026-09-24Updated 2026-09-24Sources: CVE.org, NVD

NVD CVE.org

What to do

Find your product and version, then upgrade to the build on the right.

ServiceNow AI PlatformAffected: < Yokohama Patch 13 Hot Fix 5aUpgrade to: Yokohama Patch 13 Hot Fix 5aAffected: < Zurich Patch 10 Hot Fix 3bUpgrade to: Zurich Patch 10 Hot Fix 3bAffected: < Zurich Patch 10 Hot Fix 4a W32Upgrade to: Zurich Patch 10 Hot Fix 4a W32Affected: < Zurich Patch 11 Hot Fix 3Upgrade to: Zurich Patch 11 Hot Fix 3 + 3 more branchesStated by: CVE record

Versions as the sources state them. Full version matrix after sign-in

Steps

Written by AI from the record

Check which ServiceNow AI Platform release and patch level your instance is running.
Confirm it falls in the vulnerable range (any version before the fixes listed below).
Apply the fix for your branch: Yokohama Patch 13 Hot Fix 5a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 10 Hot Fix 4a W32, Zurich Patch 11 Hot Fix 3, Australia Patch 2 Hot Fix 4b W32, Australia Patch 4 Hot Fix 3, or Australia Patch 5.
If you're on a ServiceNow-hosted instance, verify with ServiceNow support that the update has already been applied to your tenant.
If self-hosted or partner-managed, schedule the hotfix immediately rather than waiting for a routine maintenance window.

Usually a quick update

What it is

From the CVE record

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access, potentially enabling further unintended access. ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

In plain language

Written by AI from the record

A flaw in ServiceNow's AI Platform lets outsiders read private data without logging in, so if you use this platform you should patch it now even though there's no confirmed attack yet.

Authorization bypass (CWE-284) in ServiceNow AI Platform allows unauthenticated network-based access to records the user is not entitled to view, reachable in default configuration.

If you're affected

Customer data exposure
Confidential record disclosure
Compliance/regulatory exposure
Reputational damage

What is it

Think of this like a filing cabinet in your office that's supposed to require a key, but someone found they can open a drawer without any key and read files meant to be private. No password or trick is needed — anyone who can reach the system over the network can see data they shouldn't.

Who is affected

This matters to you if your business uses ServiceNow's AI Platform, whether it's hosted by ServiceNow, run by a partner, or self-hosted. Because no login or special access is needed and the issue is reachable in the default setup, any internet-facing deployment is at risk until patched.

How urgent is it

There is no confirmed case yet of attackers exploiting this specific flaw, but it allows anyone to pull private data without a password, and press coverage of it is rising with a known data-theft group being named in connection with similar roundups. Given the ease of exploitation and the sensitivity of exposed data, treat this as urgent and patch without delay.

What to do — in detail

Confirm exposure by identifying your ServiceNow AI Platform family and current patch/hotfix level. The authorization bypass is fixed in branch-specific hotfixes: Yokohama Patch 13 Hot Fix 5a, Zurich Patch 10 Hot Fix 3b, Zurich Patch 10 Hot Fix 4a W32, Zurich Patch 11 Hot Fix 3, Australia Patch 2 Hot Fix 4b W32, Australia Patch 4 Hot Fix 3, and Australia Patch 5 — apply the one matching your branch; there is no single universal patch number across all releases. ServiceNow-hosted customers should verify with support that the platform-side update has been applied to their instance; self-hosted/partner-managed environments must schedule the hotfix themselves. No workaround beyond restricting network reachability to the AI Platform endpoints is documented, so prioritize the hotfix over any mitigation. No CISA KEV due date applies since this is not currently KEV-listed. Monitor ServiceNow security bulletins and your instance logs for unusual unauthenticated access patterns to AI Platform data endpoints post-patch.

Technical context

CWE-284 (Improper Access Control) enabling unauthenticated, network-reachable disclosure of arbitrary records in ServiceNow's AI Platform; no user interaction required and exploitable in default configuration. Not listed in CISA KEV and no public exploit code or confirmed in-the-wild exploitation has been reported; press attention is rising (roundup coverage referencing threat actor ShinyHunters) but this does not constitute confirmed exploitation of this specific CVE. Exploit maturity is low (no PoC on record), and predicted exploitation likelihood is low per EPSS trend (flat). Severity should be assessed as high given the unauthenticated, no-interaction access-control bypass against potentially sensitive AI platform data.

This is a general assessment based on public vulnerability data. It does not account for your specific infrastructure — when in doubt, consult a security specialist.