Jan 142026 ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation ServiceNow fixed CVE-2025–12420, a critical flaw that let unauthenticated attackers impersonate users on its AI Platform.