Critical RCE Vulnerability Hits ServiceNow AI Platform Amid Active Exploitation

Key Facts

As enterprise reliance on AI solutions accelerates, the cloud software sector faces a new security challenge that places data integrity at the forefront of operational risks. According to reports, a critical code injection vulnerability (CVE-2026-6875) in the ServiceNow AI Platform is being actively exploited in the wild by unauthenticated attackers. This flaw allows for remote code execution (RCE), potentially leading to a full compromise of ServiceNow instances; the company released a security patch on July 13th to address the issue and introduce Guarded Script protection.

This crisis arrives at a sensitive time for SaaS providers racing to integrate AI into their infrastructure, which inherently expands the cyber-attack surface. Compared to peers, companies like Salesforce and SAP have navigated similar vulnerabilities in the past, but the severity of this flaw lies in its ability to bypass authentication entirely. Per market data, the stability of mega-cap tech stocks often hinges on the speed of remediation, especially as ServiceNow serves as a critical workflow backbone for thousands of global enterprises.

Regarding market performance, the NOW stock price stood at $104.01 (at close July 16, 2026), having traded between a day low of $99.31 and a high of $105.86. Investors should watch for official updates regarding the scale of actual breaches and monitor broader macro catalysts, such as the China House Price Index scheduled for July 15, which could influence global sentiment toward growth and technology stocks.