Skip to content
Fencer Vulns
critical 9.8

CVE-2025-12420 in the critical feed json

Unauthenticated Privilege Escalation in ServiceNow AI Platform

published 2026-01-12 9 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-206275

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
53.2%
EPSS 53.2% chance of exploitation in 30 days, percentile 98%
public exploits
0
none known

Summary

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform.

ServiceNow has addressed this vulnerability by deploying a relevant security update to  hosted instances in October 2025. Security updates have also been provided to ServiceNow self-hosted customers, partners, and hosted customers with unique configurations. Additionally, the vulnerability is addressed in the listed Store App versions. We recommend that customers promptly apply an appropriate security update or upgrade if they have not already done so.

Patch / fix

  • ServiceNow Virtual Agent API 3.15.2, 4.0.4

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
9 mo ago

Exploit prediction

53.19% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/S:N/AU:Y/R:U/V:C/RE:H/U:Amber
CNA 4.0 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:H/U:Amber
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • ServiceNow Now Assist AI Agents
  • ServiceNow Virtual Agent API

Classification

Weakness
  • CWE-250 Execution with Unnecessary Privileges

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.