Skip to content
OpenAdvisories

Product · Splunk

Splunk AI Toolkit

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2026-76399

    Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) using the permissions of the search owner, which could allow access to all relev…

    Splunk Splunk AI Toolkit
  • High 8.1
    CVE-2026-76397

    Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with other users. The vulnerability is possible because Splunk AI Toolkit does not p…

    Splunk Splunk AI Toolkit
  • High 8.8
    CVE-2026-76395

    Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a mo…

    Splunk Splunk AI Toolkit
  • High 7.5
    CVE-2026-76396

    Improper Access Control through Scheduled Searches in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splun…

    Splunk Splunk AI Toolkit
  • High 8.3
    CVE-2026-76394

    Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or modify connection and configuration data through the Representational State Transfe…

    Splunk Splunk AI Toolkit
  • High 8.3
    CVE-2026-76391

    Improper Privilege Management through Agent Run History in Splunk AI Toolkit

    In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users…

    Splunk Splunk AI Toolkit