Multiple security vulnerabilities have been identified in ServiceNow AI Platform and Task Plan Templates, affecting the AI Platform across Yokohama, Zurich, and Australia release families and Task Plan Templates versions 2.0.0 and earlier. The issues can lead to unauthorized access, data exposure, and loss of isolation between domains. The combination can expose host operating systems, stored credentials, and data across domain boundaries. No confirmed exploitation has been identified.
CVE-2026-103093 (CVSS 9.4 — Critical): This is a sandbox escape in the ServiceNow AI Platform. An authenticated user with the admin role can bypass sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in ServiceNow AI Platform and Task Plan Templates, affecting the AI Platform across Yokohama, Zurich, and Australia release families and Task Plan Templates versions 2.0.0 and earlier. The issues can lead to unauthorized access, data exposure, and loss of isolation between domains. The combination can expose host operating systems, stored credentials, and data across domain boundaries. No confirmed exploitation has been identified.
CVE-2026-103093 (CVSS 9.4 — Critical): This is a sandbox escape in the ServiceNow AI Platform. An authenticated user with the admin role can bypass sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access.[emaillocker id="1283"]
CVE-2026-103094 (CVSS 7.1 — High): This is a cleartext credential storage flaw in the ServiceNow AI Platform. It can cause a user's plaintext password to be persisted in a system table, potentially exposing that password to a user who otherwise would not be entitled to view it.
CVE-2026-6877 (CVSS 5.3 — Medium): This is a domain separation bypass in the Task Plan Templates application. It enables authenticated users with specific roles to create records across domain boundaries.
These vulnerabilities collectively present a serious risk to enterprise deployments, particularly where privileged users, cross-domain access, or multi-tenant configurations are present. Organizations with exposed administrative roles or broad user access are most at risk. Affected environments should be treated as high priority for review.
The following reports contain further technical details:
[/emaillocker]