# ServiceNow patches three critical AI Platform flaws

_Published Friday, August 28, 2026 at 7:07 AM EDT · Security · Latest · Tier 1 — Major_

![ServiceNow patches three critical AI Platform flaws — Primary](https://www.bleepstatic.com/content/hl-images/2026/07/20/servicenow-headpic.jpg)

ServiceNow released patches for three maximum-severity vulnerabilities in its AI Platform: two code-injection flaws and an SQL-injection flaw. The company said unauthenticated attackers could use the issues in low-complexity attacks without user interaction, enabling arbitrary code execution, privilege escalation, or access to and modification of instance data. ServiceNow also patched a high-severity sandbox-escape issue affecting the platform. The company said it was not aware of malicious exploitation and advised customers to update or upgrade self-hosted instances.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/servicenow-warns-of-three-max-severity-security-vulnerabilities/)
- [The Hacker News](https://thehackernews.com/2026/08/three-cvss-100-servicenow-flaws-could.html)
- [cybersecuritynews.com](https://cybersecuritynews.com/servicenow-fixes-critical-flaws/)
- [Forkast News](https://forkast.news/three-cvss-10-0-vulnerabilities-in-servicenow-ai-platform-signal-escalating-infrastructure-risk/)

---
Canonical: https://techandbusiness.org/newswire/hPWGZbhJv-SUSLW0ZYh5Oc
Published: 2026-08-28T11:07:22.647Z
Story chronology: 2026-08-28T10:29:42.000Z
Retrieved: 2026-10-12T16:44:43.119Z
Publisher: Tech & Business (techandbusiness.org)