ServiceNow security advisory (AV26-022)

Serial number: AV26-022
Date: January 13, 2026

On January 12, 2026, ServiceNow published a security advisory to address a critical vulnerability in the following products:

• Now Assist AI Agents (sn_aia) – versions prior to 5.1.18
• Now Assist AI Agents (sn_aia) – versions prior to 5.2.19
• Virtual Agent API (sn_va_as_service) – versions prior to 3.15.2
• Virtual Agent API (sn_va_as_service) – versions prior to 4.0.4

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• [Security Advisory] CVE-2025-12420 - Privilege Escalation in ServiceNow AI Platform
• ServiceNow security advisories