# CVE-2026-86857: ServiceNow AI Platform authorization bypass

Source: https://junglewise.ai/threats/cve-2026-86857-servicenow-has-remediated-an-authorization-bypass-security-issue  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-24. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-86857 · Severity: info · Published 2026-09-24

ServiceNow's AI Platform, which processes and manages business data, contained an authorization flaw that allowed authenticated users to access data they were not entitled to view. An attacker with valid credentials could exploit this to access sensitive information across the platform. ServiceNow has released patches and recommends customers apply updates immediately.

Technologies: [ServiceNow AI Platform](https://junglewise.ai/threats/technologies/servicenow-ai-platform). Vendors: [ServiceNow](https://junglewise.ai/threats/vendors/servicenow).

## Quick answers

**Is CVE-2026-86857 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-86857 being exploited in the wild.

**How severe is CVE-2026-86857?** Informational severity, published 24 September 2026.

**Which products and versions are affected?** ServiceNow AI Platform.

**Is there a fix for CVE-2026-86857?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-86857 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-86857?** Check whether you run ServiceNow AI Platform. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An authorization bypass vulnerability in ServiceNow AI Platform allows authenticated users to access data beyond their privilege level through an unspecified mechanism in the platform's access control logic. The vulnerability requires valid credentials to exploit and has no known public exploitation. ServiceNow has deployed patches to hosted instances and provided updates to partners and self-hosted customers.

## Affected products

- ServiceNow AI Platform

## Timeline

- 2026-09-24: disclosed

## References

- [https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623)

## Related threats

- [ServiceNow AI Platform information disclosure in credential persistence](https://junglewise.ai/threats/cve-2026-103094-servicenow-has-remediated-an-information-disclosure)
- [ServiceNow AI Platform sandbox escape](https://junglewise.ai/threats/cve-2026-103093-servicenow-has-remediated-a-sandbox-escape-security-issue-that)
- [ServiceNow AI Platform missing authorization in instance data access](https://junglewise.ai/threats/cve-2026-86860-servicenow-has-remediated-a-missing-authorization-vulnerability)
- [ServiceNow AI Platform authorization bypass](https://junglewise.ai/threats/cve-2026-86859-servicenow-has-remediated-an-authorization-bypass-security-issue)
- [ServiceNow AI Platform improper access control](https://junglewise.ai/threats/cve-2026-86858-servicenow-has-remediated-an-improper-access-control-security)