Splunk MCP Server vulnerabilities

Latest Splunk MCP Server CVEs

Newest publication first

1. CVE-2026-76286 Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server

   Published 2026-10-07

   Medium·CVSS 5.3 EPSS 0.17%

   In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface (API) tool to the URL configured for that tool. If another user controls that URL, they could capture the...

2. CVE-2026-20205 Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app

   Published 2026-04-15

   High·CVSS 7.2 EPSS 0.29%

   In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to the Splunk _internal index or possesses the high-privilege capability mcp_tool_admin could view users session and authorization tokens in clear text.<br><br>The vulnerability would require eith...

3. CVE-2025-20381 SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool

   Published 2025-12-03

   Medium·CVSS 5.4 EPSS 0.24%

   In Splunk MCP Server app versions below 0.2.4, a user with access to the "run_splunk_query" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.