Gbhackers

Critical ServiceNow Vulnerability Allows Unauthenticated User Impersonation

First seen 13 Jan 2026, 11:46 UTC • Gbhackers

•55.8

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical vulnerability (CVE-2025-12420) in the ServiceNow AI Platform allows unauthenticated attackers to impersonate legitimate users and perform unauthorized operations. Discovered by AppOmni in October 2025, this privilege escalation flaw has prompted immediate remediation efforts by ServiceNow.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

Continue Reading

Critical AI Security Flaw in ServiceNow Leads to User Impersonation Risk Emergence of Agentic AI Raises Governance and Security Challenges Google Enhances Chrome's AI Security with New Defense Layer

Critical ServiceNow Vulnerability Allows Unauthenticated User Impersonation

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading