Critical ServiceNow Vulnerability Allows Unauthenticated User Impersonation

Critical ServiceNow Vulnerability Allows Unauthenticated User Impersonation

First seen 13 Jan 2026, 11:46 UTC •GbhackersCybersecuritynewsCyberpress •84% similarity •55.8

Article Content

Browse articles
ThreatCluster

A critical vulnerability (CVE-2025-12420) in the ServiceNow AI Platform allows unauthenticated attackers to impersonate legitimate users and perform unauthorized operations. Discovered by AppOmni in October 2025, this privilege escalation flaw has prompted immediate remediation efforts by ServiceNow.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

AppOmni ServiceNow ServiceNow AI Platform Privilege Escalation