Read the docs
TI-2026-16430 Aliases CVE-2026-20238GHSA-7rq8-f887-2r5g

Improper Access Control through Role Inheritance in Splunk AI Toolkit app

Priority LOW 29CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-863.

Summary

In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through `srchFilter` configurations on custom roles.<br><br>The app contains an `authorize.conf` configuration file with a `srchFilter` entry that modifies the built-in ‘user’ role. Because the Splunk platform combines inherited search filters with the `OR` SPL operator, the injected filter overrides more restrictive filters on child roles.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0032 25th percentileScored 2026-11-07
Fix Fixed Splunk AI Toolkit (Splunk): 5.7.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SplunkSplunk AI Toolkit5.7 to before 5.7.35.7.3Patch availableCNA
  • Splunk AI Toolkit VendorSplunk Affected 5.7 to before 5.7.3 Fixed in 5.7.3 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*5.7.0 to before 5.7.3VulnerableSplunk
  • cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:* Versions 5.7.0 to before 5.7.3 Vulnerable ·Splunk

Remediation

  • Fix · CNA Splunk AI Toolkit (Splunk) Fixed in 5.7.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-20238
  2. 2026-10-03 Alias added: GHSA-7rq8-f887-2r5g

References

Advisory 1

  • TI-2026-16455 OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit CVSS 3.1CRITICAL 9.1
  • TI-2026-53450 Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit CVSS 3.1HIGH 8.8
  • TI-2026-53449 Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit CVSS 3.1HIGH 8.3
  • TI-2026-53446 Improper Privilege Management through Agent Run History in Splunk AI Toolkit CVSS 3.1HIGH 8.3
  • TI-2026-53454 Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit CVSS 3.1HIGH 8.1
  • TI-2026-53452 Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit CVSS 3.1HIGH 8.1
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences