ServiceNow AI Platform (unpatched instances before June 2026 patch releases)
ServiceNow is a cloud-based platform used by businesses to manage IT operations, employee workflows, and customer service processes.
Root Cause
The flaw exists in a pre-authentication endpoint (/assessment_thanks.do), meaning the server processes attacker-controlled input before verifying who is sending it. The sandbox meant to contain that code execution can be escaped via a documented gadget chain, giving the attacker full control of the ServiceNow instance and any connected proxy servers.
Attack Vector
An attacker sends an HTTP POST request to the publicly accessible /assessment_thanks.do endpoint with a crafted payload. No credentials are needed. The sandbox escape gadget routes the request to the same code execution primitive identified in the published proof-of-concept exploit, resulting in complete instance compromise. Active exploitation has been observed in the wild.
Detection Notes
Look for unexpected POST requests to /assessment_thanks.do in your web server logs. Monitor for new or unusual processes spawned by the ServiceNow application user. Alert on any outbound connections from your ServiceNow host to unfamiliar external IP addresses.
Recommended Actions
- Apply the June 2026 patches immediately (Brazil EA/GA, Australia Patch 2, Zurich Patch 7b/9, Yokohama Patch 12 HF1b/13).
- Restrict external access to your ServiceNow instance at the network level where possible.
- Review ServiceNow logs for POST activity against the affected endpoint going back to April 2026.