CVE-2026-202669.1CriticalCWE-78
Splunk AI Toolkit vulnerability
Splunk · Splunk AI Toolkit
Not in CISA KEVVendor fix available
0.6%probability of exploitation in the next 30 days
50th percentile
050100
Higher than 50% of scored CVEs
9.1CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which constructs OS command strings from dynamic parameters without disabling shell interpretation.
Coverage3 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 17 Jun.
Quiet for 10 weekslast report 20 Aug3 articles2 outlets
- Wed 17 Jun, 20:12 UTC. SecurityOnline, first report. Splunk AI Toolkit flaw allows arbitrary command execution.
- Thu 18 Jun, 11:11 UTC. SecurityWeek, its first report on the story. Atlassian, Splunk release patches for critical AI Toolkit flaw.
- Thu 20 Aug, 05:20 UTC. SecurityOnline. Splunk patches AI Toolkit OS command injection flaw CVE-2026-20266.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 17 Jun 20:12 | SecurityOnline | Splunk AI Toolkit flaw allows arbitrary command execution |
| 18 Jun 11:11 | SecurityWeek | Atlassian, Splunk release patches for critical AI Toolkit flaw |
| 20 Aug 05:20 | SecurityOnline | Splunk patches AI Toolkit OS command injection flaw CVE-2026-20266 |
- Splunk AI Toolkit flaw allows arbitrary command executionSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.