CVE-2025-12420: Unauthenticated Privilege Escalation in ServiceNow AI Platform
ServiceNow · Now Assist AI Agents
Vendor fix available · Affected: ServiceNow Now Assist AI Agents · Exploitation: likely to be exploited (10% or more)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 98% of scored CVEs
DescriptionCVE.org
A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update to hosted instances in October 2025. Security updates have also been provided to ServiceNow self-hosted customers, partners, and hosted customers with unique configurations. Additionally, the vulnerability is addressed in the listed Store App versions. We recommend that customers promptly apply an appropriate security update or upgrade if they have not already done so.
Affected products2
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- ServiceNow · Now Assist AI Agentsfrom 5.0.26 up to and including 5.1.17; from 5.0.26 up to and including 5.2.18
- ServiceNow · Virtual Agent APIbefore 3.15.2; before 4.0.4
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- ServiceNow
- Published
- January 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2025-12420 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.