What is CVE-2026-20266?

CVE-2026-20266 is a critical-severity vulnerability in Splunk Ai_toolkit, classified under OS Command Injection. CVSS score: 9.1/10. Published 2026-06-17.

How severe is CVE-2026-20266?

Critical severity. CVSS v3 base score is 9.1 out of 10.

RCE in Splunk Ai_toolkit

CVE-2026-20266

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell executi…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.006 (46.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Splunk Ai_toolkit
Splunk Ai Toolkit — versions 5.7

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

psirt@cisco.com (Vendor Advisory)

Frequently asked questions

What is CVE-2026-20266?: CVE-2026-20266 is a critical-severity vulnerability in Splunk Ai_toolkit, classified under OS Command Injection. CVSS score: 9.1/10. Published 2026-06-17.
How severe is CVE-2026-20266?: Critical severity. CVSS v3 base score is 9.1 out of 10.