Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

1. Basic Information Article Title : ServiceNow Patches 3 Critical Code Injection Vulnerabilities Source : SecurityWeek Publication Date : 2026-08-31 Original Article : SecurityWeek Related Sources : ServiceNow August 2026 CVE Advisory , BleepingComputer Related Malware, Threat Groups, CVEs, Products : CVE-2026-18885, CVE-2026-18886, CVE-2026-74820, CVE-2026-6876, ServiceNow AI Platform, Now Platform Severity : Critical 2. Executive Summary ServiceNow patched three unauthenticated CVSS 10.0 vulnerabilities—code injection in the GraphQL Composite Data API, an access control flaw in configuration image upload processing, and SQL injection in dynamic schema ORDER BY clauses—along with an unauthenticated sandbox escape in the ServiceNow AI Platform. 3. Attack Flow From Unauthenticated Request to Instance Compromise An attacker sends a crafted request to an externally accessible ServiceNow AI Platform. CVE-2026-18885 causes code injection in the GraphQL Composite Data API. CVE-2026-18886 exploits an access control flaw in configuration image upload processing to create and modify data and escalate privileges. CVE-2026-74820 injects SQL into dynamic ORDER BY clauses to manipulate the underlying database. CVE-2026-6876 escapes the sandbox to execute code within the Now Platform. Successful exploitation can spread to instance data, integration credentials, approval workflows, and external systems. Active exploitation is not observed. 4. Attacker Position and Execution Context An unauthenticated external attacker with network access to the HTTP(S) endpoint of the ServiceNow instance. Operates with the privileges of the Now Platform or the underlying database upon successful exploitation. 5. Visibility for Victims and Administrators Victims Because exploitation requires no user interaction, it may appear on the screen as unauthorized changes to data, settings, permissions, or approval workflows. Administrators Clues include abnormal GraphQL requests, configuration image uploa