Back Startupfortune

ServiceNow patches three maximum severity flaws inside its AI agent platform

Startupfortune • August 30, 2026

ServiceNow disclosed four security vulnerabilities on August 27, three rated a perfect 10.0 on the CVSS scale, that let unauthenticated attackers execute code, alter data, or run arbitrary SQL inside its AI Platform. The flaws sat inside the exact infrastructure ServiceNow is pitching to enterprises for autonomous AI agents, and while patches are out for the Xanadu, Yokohama, and Zurich releases, the company says it isn't aware of active exploitation yet.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated attackers to execute arbitrary code remotely and affects versions 25.3.1 or earlier of Remote Support and 24.3.4 or earlier of Privileged Remote Access. Users are advised to apply the patches released on February 6, 2026, to mitigate the risk of exploitation. 860 sources 67

Extracted Entities

ServiceNow patches three maximum severity flaws inside its AI agent platform

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (2)

Platforms (1)