CVE-2026-202654.3MediumCWE-1188
Insecure Default Domain Allowlist in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
Not in CISA KEVVendor fix available
0.2%probability of exploitation in the next 30 days
12th percentile
050100
Higher than 12% of scored CVEs
4.3MediumCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 17 Jun.
Quiet for 20 weekslast report 18 Jun2 articles2 outlets
- Wed 17 Jun, 20:12 UTC. SecurityOnline, first report. Splunk AI Toolkit flaw allows arbitrary command execution.
- Thu 18 Jun, 11:11 UTC. SecurityWeek, its first report on the story. Atlassian, Splunk release patches for critical AI Toolkit flaw.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 17 Jun 20:12 | SecurityOnline | Splunk AI Toolkit flaw allows arbitrary command execution |
| 18 Jun 11:11 | SecurityWeek | Atlassian, Splunk release patches for critical AI Toolkit flaw |
- Atlassian, Splunk release patches for critical AI Toolkit flawSecurityWeek · mentions it in passing
- Splunk AI Toolkit flaw allows arbitrary command executionSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.