Splunk Splunk AI Toolkit
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76399 | 6.0 – < 6.0.1 | Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit | HIGH 8.1 | 0.4 % | ||
| CVE-2026-76398 | 6.0 – < 6.0.1 | Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-76397 | 5.7 – < 6.0.0 | Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit | HIGH 8.1 | 0.4 % | ||
| CVE-2026-76396 | 5.7 – < 6.0.0 | Improper Access Control through Scheduled Searches in Splunk AI Toolkit | HIGH 7.5 | 0.3 % | ||
| CVE-2026-76395 | 5.7 – < 6.0.0 | Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit | HIGH 8.8 | 0.7 % | ||
| CVE-2026-76394 | 5.7 – < 6.0.0 | Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit | HIGH 8.3 | 0.4 % | ||
| CVE-2026-76393 | 5.7 – < 6.0.0 | Race Condition during Model Upload through the REST API in Splunk AI Toolkit | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-76392 | 5.7 – < 6.0.0 | Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-76391 | 5.7 – < 6.0.0 | Improper Privilege Management through Agent Run History in Splunk AI Toolkit | HIGH 8.3 | 0.5 % | ||
| CVE-2026-20266 | 5.7 – < 5.7.4 | OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-20265 | 5.7 – < 5.7.4 | Insecure Default Domain Allowlist in Splunk AI Toolkit | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-20238 | 5.7 – < 5.7.3 | Improper Access Control through Role Inheritance in Splunk AI Toolkit app | MEDIUM 6.5 | 0.3 % |