An improper access control vulnerability in the ServiceNow AI Platform allows unauthenticated attackers to modify or delete critical instance data, posing a significant risk to data integrity.

The vulnerability is an improper access control flaw that permits unauthenticated users to interact with instance data. By bypassing intended permission checks, an attacker can manipulate or destroy sensitive information stored within the platform.

Successful exploitation of this vulnerability could lead to significant data loss, unauthorized record modification, and the corruption of business-critical information. Given the CVSS score of 8.7, this is classified as a high-severity issue that threatens the confidentiality and integrity of platform operations. Organizations relying on the ServiceNow AI Platform for automated workflows face potential service disruption and loss of trust if instance data is compromised or deleted.

Immediate Action: Administrators must verify their current platform version and apply the relevant security patches provided by ServiceNow in the KB3159623 advisory immediately.

Proactive Monitoring: Security teams should audit system logs for unusual patterns of data modification or deletion, particularly those originating from unknown or unauthenticated sources.

Compensating Controls: Implement strict network access controls to limit exposure of the ServiceNow instance to trusted IP ranges while the patching process is completed.

Public Exploit Available: No (exploit_available: false).

Given the ability for unauthenticated actors to modify or delete instance data, this vulnerability represents a severe threat to platform integrity. Organizations must prioritize the application of the specified hotfixes provided by ServiceNow to eliminate this exposure. Failure to patch promptly leaves the platform vulnerable to unauthorized data manipulation by external parties.