Splunk Ai Toolkit
12 CVEs affecting Splunk Ai Toolkit. Latest disclosed: 2026-08-19. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20266 | Critical | 9.1 | 2026-06-17 | In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterpri… |
CVE-2026-76395 | High | 8.8 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file c… |
CVE-2026-76394 | High | 8.3 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure contain… |
CVE-2026-76391 | High | 8.3 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access… |
CVE-2026-76399 | High | 8.1 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Proces… |
CVE-2026-76397 | High | 8.1 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including… |
CVE-2026-76396 | High | 7.5 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize… |
CVE-2026-20238 | Medium | 6.5 | 2026-05-20 | In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restri… |
CVE-2026-76393 | Medium | 5.9 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload r… |
CVE-2026-76392 | Medium | 5.4 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for con… |
CVE-2026-76398 | Medium | 4.3 | 2026-08-19 | In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user wit… |
CVE-2026-20265 | Medium | 4.3 | 2026-06-17 | In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to ma… |