ServiceNow published an advisory on August 27 covering four vulnerabilities in its AI Platform, three of them rated a maximum 10.0 severity and reachable, in certain configurations, without authentication. CVE-2026-18885 is a code injection flaw in the GraphQL Composite Data API that can let an unauthenticated user execute arbitrary code and read or modify instance data beyond what was intended. CVE-2026-18886 is an improper access-control flaw in the platform’s system configuration image-upload processor that can allow unauthenticated data creation or modification, resulting in privilege escalation. CVE-2026-74820 is a SQL injection flaw that can let an unauthenticated user run arbitrary SQL statements directly against the instance’s underlying database. A fourth, lower-severity issue, CVE-2026-6876, was included in the same bulletin.

ServiceNow said all three critical issues were found through its own internal security research and responsible disclosure program rather than active exploitation, and that it has already deployed the fix to its own hosted instances. Self-hosted and partner-managed customers are responsible for applying the update themselves, and ServiceNow is urging customers to verify their instance version and confirm the patch has landed on every production environment, not just hosted ones.

Why it matters: ServiceNow’s AI Platform sits underneath identity, access request, and workflow automation for much of its customer base, so an unauthenticated code-execution or SQL-injection path is not a contained application bug, it is a potential foothold into the system governing who has access to what. A GraphQL API and an image-upload handler both bypassing authentication in the same bulletin points to a pattern worth flagging: platform teams should re-test any newer API surface added to legacy authenticated products, since that is where old authentication assumptions tend to quietly stop applying.

The original insight: three CVSS-maximum, unauthenticated flaws in one bulletin on a platform this central to identity workflows argues for treating patch confirmation, not just patch availability, as the actual security metric. Self-hosted customers who assume the vendor’s own remediation covers them are the exposure this bulletin is really about.

Source: August 2026 CVE Advisory Notification, ServiceNow Security Bulletin KB3152242