Three Critical ServiceNow AI Platform Flaws Allow Unauthenticated Code and SQL Execution
ServiceNow has patched four security flaws in its AI Platform, with three rated CVSS 10.0, allowing unauthenticated attackers to execute code and SQL. The company has deployed updates to hosted instances and provided them to partners and self-hosted customers. Organizations running self-hosted instances must apply these updates immediately to prevent severe compromise.