Skip to content
OpenAdvisories

Product · Splunk

Splunk MCP Server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-76286

    Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server

    In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface (API) tool to the URL configured for that tool. If another user controls that URL, t…

    Splunk Splunk MCP Server
  • Medium 5.4
    CVE-2025-20381

    SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool

    In Splunk MCP Server app versions below 0.2.4, a user with access to the "run_splunk_query" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions bey…

    Splunk Splunk MCP Server