Live › vulnerability › CVE-2026-103093
ServiceNow AI Platform had a flaw that let an authenticated user with the admin role break out of the Rhino JavaScript sandbox. Successful exploitation runs arbitrary code on the underlying host operating system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 19:26 UTC. All times on this page are UTC.
Organizations running the ServiceNow AI Platform, including self-hosted and partner-managed instances, where admin-role users can reach the Rhino sandbox. Hosted instances were updated by ServiceNow already; the sources do not say which releases or configurations are affected beyond that.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access.
ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
This page as .md · .json · in your agent: get_signal("CVE-2026-103093")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.