Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks

Splunk published coordinated security advisories for three vulnerabilities affecting Splunk Enterprise, Splunk Cloud Platform, and the Splunk AI Toolkit (CVE-2026-20240, CVE-2026-20239, CVE-2026-20238). The issues permit low-privileged users to rename critical system directories causing complete Denial of Service, cause raw network I/O buffers (including session cookies and cleartext HTTP bodies) to be written to an internal log index, and override role filters to bypass access controls; Splunk provides fixed versions and workarounds (disabling apps or editing configs) as mitigations.