Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk AI Toolkit 6.0.1 Clear all filters
TI-2026-53454 CVE-2026-76399 · GHSA-x8wf-gj49-q42j

Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit

Priority LOW 37

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) using the permissions of the search owner…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0035 Published 2026-08-19 Fixed in 6.0.1 CWE-732
TI-2026-53453 CVE-2026-76398 · GHSA-cq72-pxmj-w4mh

Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit

Priority LOW 20

In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission through the Representational State Transfer (…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00254 Published 2026-08-19 Fixed in 6.0.1 CWE-862