Skip to content
AI Vulnerability Exposes Systems via ServiceNow's Now Assist

AI Vulnerability Exposes Systems via ServiceNow's Now Assist

First seen 13 Oct 2026, 16:34 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 13, 2026 at 17:33 UTC
  • •ServiceNow's Now Assist AI vulnerability allows admin-level access through weak authentication.
  • •Over 48,000 new CVEs reported in 2025 highlight a growing vulnerability landscape.
  • •Experts recommend limiting AI agents' capabilities and conducting risk reviews.

A vulnerability in ServiceNow's Now Assist AI platform has exposed customer data and systems to potential exploitation. The flaw, stemming from weak authentication in its legacy chatbot, allowed attackers to impersonate users with just an email address. This vulnerability escalated with the integration of the advanced agentic AI, Now Assist, enabling admin-level access to connected systems like Salesforce and Microsoft. Experts have labeled this the most severe AI-driven vulnerability to date, urging organizations to limit AI agents' capabilities and conduct thorough risk reviews. The National Vulnerability Database reported over 48,000 new CVEs in 2025, indicating a growing landscape of vulnerabilities. Organizations are advised to implement immediate security measures to mitigate risks associated with AI agents.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-01-01
Record CVEs reported
The National Vulnerability Database recorded over 48,000 new CVEs in 2025, marking an all-time high.
TechTarget
2026-10-13
ServiceNow vulnerability disclosed
A critical vulnerability in ServiceNow's Now Assist AI was disclosed, exposing customer data due to weak authentication.
TechTarget

More articles in this cluster (3)

Following this threat?

Track Microsoft in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 4

Common questions

What systems are affected by the ServiceNow vulnerability?
The vulnerability affects systems integrated with ServiceNow's Now Assist AI, including Salesforce and Microsoft.
How severe is this vulnerability?
Experts have classified it as critical due to the potential for admin-level access and data exposure.
What immediate actions should organizations take?
Organizations should limit AI agents' capabilities and conduct thorough risk reviews to mitigate potential exploitation.