Splunk Splunk AI Toolkit vulnerabilities
12 published CVEs name Splunk Splunk AI Toolkit among the affected products.
- Published CVEs
- 12
- Last 12 months
- 12
- Critical
- 1
- Known exploited
- 0
Critical 1High 6Medium 5Low 0Not scored 0
Newest CVEs
- CVE-2026-76399
Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
High8.1 - CVE-2026-76398
Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
Medium4.3 - CVE-2026-76397
Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
High8.1 - CVE-2026-76396
Improper Access Control through Scheduled Searches in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
High7.5 - CVE-2026-76395
Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
High8.8 - CVE-2026-76394
Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
High8.3 - CVE-2026-76393
Race Condition during Model Upload through the REST API in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
Medium5.9 - CVE-2026-76392
Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
Medium5.4 - CVE-2026-76391
Improper Privilege Management through Agent Run History in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
High8.3 - CVE-2026-20266
OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
Splunk · Splunk AI Toolkit
Critical9.1
Most common weaknesses
- CWE-862 Missing authorization2
- CWE-863 Incorrect authorization2
- CWE-1188 1
- CWE-269 Improper privilege management1
- CWE-362 Race condition1
- CWE-502 Deserialization of untrusted data1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-732 1
- CWE-78 OS command injection1
- CWE-798 Hard-coded credentials1