Skip to content
OpenAdvisories

Product · Splunk

Splunk MCP Server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-20205

    Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app

    In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to the Splunk `_internal` index or possesses the high-privilege capability `mcp_tool_admin` could view users session and authorization tokens in clear text.<br><br>The vulnera…

    Splunk Splunk MCP Server