In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://advisory.splunk.com/advisories/SVD-2026-0613 Vendor Advisory, Mitigation
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.3 · splunkNVD modified 2026-10-26 11:10
Affected (CPE criteria) 1
cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*
References 1
- https://advisory.splunk.com/advisories/SVD-2026-0613 Vendor Advisory, Mitigation