Splunk AI Toolkit vulnerabilities

Latest Splunk AI Toolkit CVEs

Newest publication first

1. CVE-2026-76399 Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit

   Published 2026-08-19

   High·CVSS 8.1 EPSS 0.35%

   In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) using the permissions of the search owner, which could allow access to all relevant data and affect s...

2. CVE-2026-76398 Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit

   Published 2026-08-19

   Medium·CVSS 4.3 EPSS 0.25%

   In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission through the Representational State Transfer (REST) API. The vulnerability is possible because Splunk AI T...

3. CVE-2026-76397 Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit

   Published 2026-08-19

   High·CVSS 8.1 EPSS 0.35%

   In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with other users. The vulnerability is possible because Splunk AI Toolkit does not preserve the trusted e...

4. CVE-2026-76396 Improper Access Control through Scheduled Searches in Splunk AI Toolkit

   Published 2026-08-19

   High·CVSS 7.5 EPSS 0.32%

   In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splunk AI Toolkit does not...

5. CVE-2026-76395 Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit

   Published 2026-08-19

   High·CVSS 8.8 EPSS 0.65%

   In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a model codec in Splunk A...

6. CVE-2026-76394 Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit

   Published 2026-08-19

   High·CVSS 8.3 EPSS 0.35%

   In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or modify connection and configuration data through the Representational State Transfer (REST) API. The mis...

7. CVE-2026-76393 Race Condition during Model Upload through the REST API in Splunk AI Toolkit

   Published 2026-08-19

   Medium·CVSS 5.9 EPSS 0.18%

   In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload request for the same model name, causing the resulting model lookup entry to reference attacker-controlled content. The ra...

8. CVE-2026-76392 Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit

   Published 2026-08-19

   Medium·CVSS 5.4 EPSS 0.23%

   In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container services. The use of hard-coded credentials is possible because Splunk AI Toolkit generates or stores cr...

9. CVE-2026-76391 Improper Privilege Management through Agent Run History in Splunk AI Toolkit

   Published 2026-08-19

   High·CVSS 8.3 EPSS 0.47%

   In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users through Agent Run Hi...

10. CVE-2026-20266 OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

    Published 2026-06-17

    Critical·CVSS 9.1 EPSS 0.63%

    In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper...

11. CVE-2026-20265 Insecure Default Domain Allowlist in Splunk AI Toolkit

    Published 2026-06-17

    Medium·CVSS 4.3 EPSS 0.22%

    In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulner...

12. CVE-2026-20238 Improper Access Control through Role Inheritance in Splunk AI Toolkit app

    Published 2026-05-20

    Medium·CVSS 6.5 EPSS 0.32%

    In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through srchFilter configurations on custom roles.<br><br>The app contains an authorize.conf configuration file with...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.