Read the docs
TI-2026-53450 Aliases CVE-2026-76395GHSA-wmwx-pqh3-xv86

Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit

Priority MEDIUM 41CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a model codec in Splunk AI Toolkit deserializes sparse matrix data without guarding against embedded pickle content. For more information see Troubleshoot the Splunk Machine Learning Toolkit (https://help.splunk.com/en/splunk-cloud-platform/apply-machine-learning/machine-learning-toolkit-user-guide/5.5.0/troubleshooting-mltk/troubleshoot-the-splunk-machine-learning-toolkit) in the Splunk documentation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00652 51st percentileScored 2026-11-07
Fix Fixed Splunk AI Toolkit (Splunk): 6.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SplunkSplunk AI Toolkit5.7 to before 6.0.06.0.0Patch availableCNA
  • Splunk AI Toolkit VendorSplunk Affected 5.7 to before 6.0.0 Fixed in 6.0.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*5.7.0 to before 6.0.0VulnerableSplunk
  • cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:* Versions 5.7.0 to before 6.0.0 Vulnerable ·Splunk

Remediation

  • Fix · CNA Splunk AI Toolkit (Splunk) Fixed in 6.0.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Splunk AI Toolkit 6.0.0

    7 records Highest priority Priority MEDIUM 1 MEDIUM, 6 LOW

    Other records, highest priority first

    • TI-2026-53449 Missing Authorization in Container and Connection Management through the REST API in Splunk AI ToolkitPriority LOW 38
    • TI-2026-53446 Improper Privilege Management through Agent Run History in Splunk AI ToolkitPriority LOW 38
    • TI-2026-53452 Improper Access Control in Experiment History through the REST API in Splunk AI ToolkitPriority LOW 35
    Show all 7 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-76395
  2. 2026-10-03 Alias added: GHSA-wmwx-pqh3-xv86
  3. 2026-10-14 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2026-16455 OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit CVSS 3.1CRITICAL 9.1
  • TI-2026-53449 Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit CVSS 3.1HIGH 8.3
  • TI-2026-53446 Improper Privilege Management through Agent Run History in Splunk AI Toolkit CVSS 3.1HIGH 8.3
  • TI-2026-53454 Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit CVSS 3.1HIGH 8.1
  • TI-2026-53452 Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit CVSS 3.1HIGH 8.1
  • TI-2026-53451 Improper Access Control through Scheduled Searches in Splunk AI Toolkit CVSS 3.1HIGH 7.5
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences