Critical ServiceNow Code Execution Flaw Now Exploited in Attacks

Attackers have begun exploiting a critical vulnerability, CVE-2026-6875, in the ServiceNow AI Platform, according to threat intelligence company Defused. The flaw allows remote code execution, though further technical detail on the vulnerability class and prerequisites has not been published. Organizations running the ServiceNow AI Platform should apply available patches immediately and check for indicators of compromise.