CVE-2026-6877
Domain Separation Bypass in ServiceNow AI Platform
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task Plan Templates Store application. This vulnerability could enable an authenticated user with a specific role to create records in domains they do not have access to, potentially leading to unauthorized data creation across domain boundaries. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
| CWE | CWE-284 |
| Vendor | servicenow |
| Product | servicenow ai platform |
| Published | Oct 29, 2026 |
| Last Updated | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for servicenow servicenow ai platform
Be the first to know when new unknown vulnerabilities affecting servicenow servicenow ai platform are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
ServiceNow / ServiceNow AI Platform
0 < SR - CSM - Task Plan Templates v3.0 (Task Plan Templates application)
References
Credits
Thanos (mr_srk1337)