Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk AI Toolkit 5.7.4 Clear all filters
TI-2026-16455 CVE-2026-20266 · GHSA-vxp7-5w84-27pf

OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

Priority MEDIUM 42

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00632 Published 2026-06-17 Fixed in 5.7.4 CWE-78
TI-2026-16454 CVE-2026-20265 · GHSA-6q6w-qw52-9q3j

Insecure Default Domain Allowlist in Splunk AI Toolkit

Priority LOW 19

In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker c…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-06-17 Fixed in 5.7.4 CWE-1188