Ai Toolkit (Splunk) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 49 known versions, newest CVE from 2026-08-19. Vendor: Splunk.
CVEs of Ai Toolkit
- CVE-2026-76399 - CVSS 8.1 (high), 2026-08-19: In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search…
- CVE-2026-76397 - CVSS 8.1 (high), 2026-08-19: In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including…
- CVE-2026-76398 - CVSS 4.3 (medium), 2026-08-19: In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user…
- CVE-2026-76396 - CVSS 7.5 (high), 2026-08-19: In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize…
- CVE-2026-76395 - CVSS 8.8 (high), 2026-08-19: In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file…
- CVE-2026-76394 - CVSS 8.3 (high), 2026-08-19: In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure…
- CVE-2026-76393 - CVSS 5.9 (medium), 2026-08-19: In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload…
- CVE-2026-76392 - CVSS 5.4 (medium), 2026-08-19: In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for…
- CVE-2026-76391 - CVSS 8.3 (high), 2026-08-19: In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges,…
- CVE-2026-20266 - CVSS 9.1 (critical), 2026-06-17: In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk…
- CVE-2026-20265 - CVSS 4.3 (medium), 2026-06-17: In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to…
- CVE-2026-20238 - CVSS 6.5 (medium), 2026-05-20: In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was…
