Critical Vulnerabilities Discovered in Splunk AI Toolkit
ID: 80358d80-bc67-5bbf-b8ff-02c1b4b45157
STIX ID: report--80358d80-bc67-5bbf-b8ff-02c1b4b45157
Feed Name: ThreatCluster
Threat Score
Two vulnerabilities in Splunk AI Toolkit versions prior to 5.7.4 are reported: CVE-2026-20265 (Medium, 4.3) lets low-privileged users exfiltrate data by making unauthorized HTTP requests due to an insecure default domain allowlist, and CVE-2026-20264 (Critical, 9.1) allows admin users to execute arbitrary OS commands via unsafe shell execution patterns; Splunk recommends upgrading to 5.7.4 or uninstalling the toolkit immediately to prevent data breaches and host compromise.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.