CVE-2025-12420
CriticalA vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform.
Published Jan 12, 2026 · Updated Feb 26, 2026
Key Facts
Patch immediately- CVE-2025-12420 is a critical-severity vulnerability (CVSS 9.3 v4) affecting Now Assist AI Agents (Servicenow), Virtual Agent API (Servicenow).
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 53% probability of exploitation in the next 30 days.
- Fixed versions are available, including Now Assist AI Agents 5.1.18, Virtual Agent API 3.15.2, Virtual Agent API 4.0.4.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v4
9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:H/U:Amber
EPSS (30-day exploit likelihood)
53%
Higher than 98.9% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2025-12420 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform.
ServiceNow has addressed this vulnerability by deploying a relevant security update to hosted instances in October 2025. Security updates have also been provided to ServiceNow self-hosted customers, partners, and hosted customers with unique configurations. Additionally, the vulnerability is addressed in the listed Store App versions. We recommend that customers promptly apply an appropriate security update or upgrade if they have not already done so.
Affected Products
4 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Now Assist AI AgentsServicenow | >= 5.0.26 | 5.1.18 |
| Virtual Agent APIServicenow | See advisory | 3.15.2 |
Patched Releases
Now Assist AI Agents
5.1.18
Virtual Agent API
3.15.2, 4.0.4
Timeline
Publicly disclosed
Jan 12, 2026
Last updated
Feb 26, 2026
Weakness Type
- CWE-250 Execution with Unnecessary Privileges
References
FAQ
Common Questions.
A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform.
Affected: Now Assist AI Agents (Servicenow) versions >= 5.0.26; Virtual Agent API (Servicenow). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Now Assist AI Agents 5.1.18, Virtual Agent API 3.15.2, Virtual Agent API 4.0.4.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2025-12420 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo