CVE-2026-20266

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which constructs OS command strings from dynamic parameters without disabling shell interpretation.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://advisory.splunk.com/advisories/SVD-2026-0614	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*

History

26 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) En versiones de Splunk AI Toolkit anteriores a la 5.7.4, un usuario con el rol de Splunk ’admin’ podría ejecutar comandos arbitrarios del sistema operativo en el host que ejecuta la instancia de Splunk Enterprise. La vulnerabilidad es posible debido a un patrón de ejecución de shell inseguro en el asistente de configuración btool, que construye cadenas de comandos del sistema operativo a partir de parámetros dinámicos sin deshabilitar la interpretación de shell.

Information

Published : 2026-06-17 18:17

Updated : 2026-10-26 11:10

NVD link : CVE-2026-20266

Mitre link : CVE-2026-20266

CVE.ORG link : CVE-2026-20266

JSON object : View

Products Affected

splunk

ai_toolkit

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-20266", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20266", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-17T18:03:52.980872Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Splunk", "product": "Splunk AI Toolkit", "versions": [{"status": "affected", "version": "5.7", "lessThan": "5.7.4", "versionType": "custom"}]}]}], "published": "2026-06-17T18:17:40.900", "references": [{"url": "https://advisory.splunk.com/advisories/SVD-2026-0614", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-78"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "In Splunk AI Toolkit versions below 5.7.4, a user who holds the \"admin\" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. \n\nThe vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which constructs OS command strings from dynamic parameters without disabling shell interpretation."}, {"lang": "es", "value": "En versiones de Splunk AI Toolkit anteriores a la 5.7.4, un usuario con el rol de Splunk \u2019admin\u2019 podr\u00eda ejecutar comandos arbitrarios del sistema operativo en el host que ejecuta la instancia de Splunk Enterprise.\n\nLa vulnerabilidad es posible debido a un patr\u00f3n de ejecuci\u00f3n de shell inseguro en el asistente de configuraci\u00f3n btool, que construye cadenas de comandos del sistema operativo a partir de par\u00e1metros din\u00e1micos sin deshabilitar la interpretaci\u00f3n de shell."}], "lastModified": "2026-10-26T11:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "433FFA09-42E8-4DB0-8677-0357A6458FA4", "versionEndExcluding": "5.7.4", "versionStartIncluding": "5.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}