What happened
ServiceNow remediated an information-disclosure issue in its AI Platform where a user's plaintext password can be persisted in a system table, potentially exposing it to a user who should not be entitled to view it.
Why it matters
ServiceNow AI orchestrates workflows with privileged automation accounts. A persisted plaintext password that a lower-privileged user can read is a credential-theft path that can escalate from the AI platform to broader instance control.
Attack vector
An authenticated user leverages the password being persisted in plaintext in a system table to read another account's password, enabling credential-based lateral movement within the instance.
Affected systems
ServiceNow AI Platform (remediated in the October 2026 KB3228994 release).
Mitigation
Apply the ServiceNow October 2026 AI Platform remediation from KB3228994; review/clear any persisted plaintext credentials.