A fresh ServiceNow advisory from August 27 covers four AI Platform bugs, and three of them sit at the top of the severity scale. On the CVSS scoring system each one rates 10.0, and in some configurations an attacker needs no credentials to trigger them. Hosted instances already received the fixes; self-hosted customers must apply them on their own.
Code injection in the GraphQL Composite Data API is the first of the trio, tracked as CVE-2026-18885. It lets an unauthenticated user execute arbitrary code and tamper with instance data. CVE-2026-18886 concerns the system configuration image upload processor, where broken access control leads to privilege escalation. The third, CVE-2026-74820, is a SQL injection reachable through a dynamic schema ORDER BY clause, giving unauthenticated attackers arbitrary queries against the instance database. A separate sandbox escape in the Now Platform, CVE-2026-6876, carries an 8.7 score and also permits unauthenticated code execution.
All three perfect-10 issues share a vector: network-reachable, low complexity, no privileges, no user interaction, and high impact on confidentiality, integrity, and availability in the vulnerable component and connected systems. They follow CVE-2026-6875, a pre-authentication sandbox escape in the same platform, which Searchlight Cyber reported to ServiceNow on April 1.
No in-the-wild exploitation has been disclosed so far, and self-hosted organizations should treat patching as urgent.
