Skip to content
OpenAdvisories

Product · Splunk

Splunk AI Toolkit

12 known vulnerabilities.

Splunk AI Toolkit at a glance

Last 12 months
12
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 2 vulnerabilities, 1 critical Jun July 2026: 0 vulnerabilities August 2026: 9 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202690
Jul 202600
Jun 202621
May 202610
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • High 8.1
    CVE-2026-76399

    Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) using the permissions of the search owner, which could allow access to all relev…

    Splunk Splunk AI Toolkit
  • High 8.1
    CVE-2026-76397

    Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with other users. The vulnerability is possible because Splunk AI Toolkit does not p…

    Splunk Splunk AI Toolkit
  • Medium 4.3
    CVE-2026-76398

    Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission through the Representational State Transfer (REST) API. The vulnerability is possibl…

    Splunk Splunk AI Toolkit
  • High 8.8
    CVE-2026-76395

    Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a mo…

    Splunk Splunk AI Toolkit
  • High 7.5
    CVE-2026-76396

    Improper Access Control through Scheduled Searches in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splun…

    Splunk Splunk AI Toolkit
  • High 8.3
    CVE-2026-76394

    Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or modify connection and configuration data through the Representational State Transfe…

    Splunk Splunk AI Toolkit
  • Medium 5.4
    CVE-2026-76392

    Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container services. The use of hard-coded credentials is possible because Splunk AI Toolkit g…

    Splunk Splunk AI Toolkit
  • Medium 5.9
    CVE-2026-76393

    Race Condition during Model Upload through the REST API in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload request for the same model name, causing the resulting model lookup entry to reference attacker-contr…

    Splunk Splunk AI Toolkit
  • High 8.3
    CVE-2026-76391

    Improper Privilege Management through Agent Run History in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users…

    Splunk Splunk AI Toolkit
  • Critical 9.1
    CVE-2026-20266

    OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool…

    Splunk Splunk AI Toolkit
  • Medium 4.3
    CVE-2026-20265

    Insecure Default Domain Allowlist in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exf…

    Splunk Splunk AI Toolkit
  • Medium 6.5
    CVE-2026-20238

    Improper Access Control through Role Inheritance in Splunk AI Toolkit app

    In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through `srchFilter` configurations on custom roles.<br><br>The app contains an `authorize.conf…

    Splunk Splunk AI Toolkit