CVE-2026-20265

In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://advisory.splunk.com/advisories/SVD-2026-0613	Vendor Advisory Mitigation

Configurations

Configuration 1 (hide)

cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*

History

26 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) En versiones de Splunk AI Toolkit anteriores a la 5.7.4, un usuario con privilegios bajos que no posee los roles de Splunk ’admin’ o ’power’ podría hacer que Splunk AI Toolkit realizara solicitudes salientes a través de HTTP a un servidor que un atacante controla, lo que podría permitir la exfiltración de datos. La vulnerabilidad existe debido a una lista de dominios permitidos (allowlist) predeterminada e insegura en Splunk AI Toolkit, que no restringe las solicitudes salientes del agente de IA a dominios externos aprobados.

Information

Published : 2026-06-17 18:17

Updated : 2026-10-26 11:10

NVD link : CVE-2026-20265

Mitre link : CVE-2026-20265

CVE.ORG link : CVE-2026-20265

JSON object : View

Products Affected

splunk

ai_toolkit

CWE

CWE-1188

Initialization of a Resource with an Insecure Default

{"id": "CVE-2026-20265", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20265", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-17T18:04:24.981105Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Splunk", "product": "Splunk AI Toolkit", "versions": [{"status": "affected", "version": "5.7", "lessThan": "5.7.4", "versionType": "custom"}]}]}], "published": "2026-06-17T18:17:40.600", "references": [{"url": "https://advisory.splunk.com/advisories/SVD-2026-0613", "tags": ["Vendor Advisory", "Mitigation"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-1188"}]}], "descriptions": [{"lang": "en", "value": "In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. \n\nThe vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains."}, {"lang": "es", "value": "En versiones de Splunk AI Toolkit anteriores a la 5.7.4, un usuario con privilegios bajos que no posee los roles de Splunk \u2019admin\u2019 o \u2019power\u2019 podr\u00eda hacer que Splunk AI Toolkit realizara solicitudes salientes a trav\u00e9s de HTTP a un servidor que un atacante controla, lo que podr\u00eda permitir la exfiltraci\u00f3n de datos.\n\nLa vulnerabilidad existe debido a una lista de dominios permitidos (allowlist) predeterminada e insegura en Splunk AI Toolkit, que no restringe las solicitudes salientes del agente de IA a dominios externos aprobados."}], "lastModified": "2026-10-26T11:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "433FFA09-42E8-4DB0-8677-0357A6458FA4", "versionEndExcluding": "5.7.4", "versionStartIncluding": "5.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}