CVE-2026-103093: Critical Sandbox Escape in ServiceNow AI

ServiceNow sandbox escape (CVSS 9.4) allows authenticated admin to execute arbitrary code on the host OS.

CVE-2026-103093 is a sandbox escape identified in ServiceNow AI Platform. The vulnerability allows an authenticated user with admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling unintended access. The issue has been remediated and patches are available.

The CVSS score is 9.4, classified as critical. ServiceNow reports no known active malicious exploitation against ServiceNow instances as of October 29, 2026. Recent social media signals have appeared but with low engagement and some technical inaccuracies—rely on official ServiceNow and NVD data only.

IT teams and administrators must promptly apply updates provided by ServiceNow. Review admin access logs for anomalous activity, audit admin permissions, and restrict them to necessity. Hosted instances have been automatically updated; self-hosted customers must apply patches manually.

At a glance

What: Sandbox escape in ServiceNow AI Platform (CVE-2026-103093) allowing authenticated users with admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system.
Severity: CVSS 9.4 (Critical). Enables arbitrary code execution with admin privileges.
Affected versions: Not reported in official NVD description. Verify with ServiceNow.
Fix: ServiceNow deployed updates to hosted instances and provided updates to partners and self-hosted customers. Apply available updates promptly.
Status: Patch available as of October 29, 2026. No known active malicious exploitation according to ServiceNow.
Action: Verify patch deployment on all instances. Check admin access logs for anomalous activity. Restrict admin permissions to necessity principle.

Sources: NVD, CVE-2026-103093

← All articles