CVE-2026-76393: Splunk AI Toolkit race condition in model upload

CVE-2026-76393 · Severity: medium · CVSS 5.9 · Published 2026-08-19

Splunk AI Toolkit is a machine learning extension for Splunk that allows users to upload and manage predictive models. A race condition in the model upload feature allows an authenticated user to overwrite another user's model by sending concurrent upload requests with the same model name, potentially injecting malicious model content that will be executed during model inference.

Technologies: Splunk AI Toolkit. Vendors: Splunk.

Quick answers

Is CVE-2026-76393 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-76393 being exploited in the wild.
How severe is CVE-2026-76393?
Medium severity, with a CVSS score of 5.9, published 19 August 2026.
Which products and versions are affected?
Splunk AI Toolkit below 6.0.0 (6.x branch) and below 6.0.1 (6.0+ branch).
Is there a fix for CVE-2026-76393?
A patch was published on 2026-08-19: Fix versions: 6.0.0 and 6.0.1 available Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-76393 attacked?
It is attacked over the network.
Am I affected by CVE-2026-76393?
Check whether you run Splunk AI Toolkit at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

CVE-2026-76393 is a race condition (CWE-362) in Splunk AI Toolkit's model upload REST API. The vulnerability occurs because the toolkit does not verify that uploaded model content matches the model lookup entry created for the same upload request. An attacker with model upload capability can exploit this by sending concurrent upload requests for the same model name; the resulting model lookup entry may reference attacker-controlled model content if the attacker's upload completes after another user's lookup entry is created but before the legitimate content is associated. Attack vector is network-based, requires authentication and the ability to upload models, and can result in arbitrary model substitution leading to potential code execution during model inference. Patches are available in Splunk AI Toolkit versions 6.0.0 and 6.0.1 or later.

Affected products

  • Splunk AI Toolkit below 6.0.0 (6.x branch) and below 6.0.1 (6.0+ branch)

Timeline

  • 2026-08-19: disclosed
  • 2026-08-19: patched: Fix versions: 6.0.0 and 6.0.1 available

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.