Critical Vulnerabilities Discovered in Splunk AI Toolkit
ID: f70627cb-3798-5095-a360-7040f42b5c98
STIX ID: report--f70627cb-3798-5095-a360-7040f42b5c98
Feed Name: ThreatCluster
Threat Score
## Executive Summary Two vulnerabilities were identified in Splunk AI Toolkit (versions prior to 5.7.4): CVE-2026-20265 (Medium, 4.3) enables low-privileged users to exfiltrate data via HTTP due to an insecure default domain allowlist, and CVE-2026-20264 (Critical, 9.1) allows admin users to execute arbitrary OS commands via unsafe shell execution patterns; Splunk advises upgrading to 5.7.4 or uninstalling the toolkit immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.