{"schema_version":1,"title":"Splunk AI Toolkit vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in Splunk AI Toolkit: 0 in the last 7 days and 9 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-76399, was published on 19 August 2026.","url":"https://junglewise.ai/threats/technologies/ai-toolkit","json_url":"https://junglewise.ai/threats/technologies/ai-toolkit.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ai-toolkit","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":12,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":9,"last_365_days":12},"latest":[{"cve":"CVE-2026-76399","cvss":8.1,"epss":0.0035,"slug":"cve-2026-76399-splunk-ai-toolkit-incorrect-permission-assignment-for-scheduled","title":"Splunk AI Toolkit incorrect permission assignment for scheduled searches","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:26.523+00:00","url":"https://junglewise.ai/threats/cve-2026-76399-splunk-ai-toolkit-incorrect-permission-assignment-for-scheduled"},{"cve":"CVE-2026-76398","cvss":4.3,"epss":0.0025,"slug":"cve-2026-76398-splunk-ai-toolkit-improper-access-control-in-experiment-history","title":"Splunk AI Toolkit improper access control in experiment history deletion","severity":"medium","exploited":false,"published_at":"2026-08-19T22:17:26.4+00:00","url":"https://junglewise.ai/threats/cve-2026-76398-splunk-ai-toolkit-improper-access-control-in-experiment-history"},{"cve":"CVE-2026-76397","cvss":8.1,"epss":0.0035,"slug":"cve-2026-76397-splunk-ai-toolkit-improper-access-control-in-experiment-history","title":"Splunk AI Toolkit improper access control in experiment history","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:26.27+00:00","url":"https://junglewise.ai/threats/cve-2026-76397-splunk-ai-toolkit-improper-access-control-in-experiment-history"},{"cve":"CVE-2026-76396","cvss":7.5,"epss":0.0032,"slug":"cve-2026-76396-splunk-ai-toolkit-improper-access-control-in-scheduled-searches","title":"Splunk AI Toolkit improper access control in scheduled searches","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:26.15+00:00","url":"https://junglewise.ai/threats/cve-2026-76396-splunk-ai-toolkit-improper-access-control-in-scheduled-searches"},{"cve":"CVE-2026-76395","cvss":8.8,"epss":0.0065,"slug":"cve-2026-76395-splunk-ai-toolkit-rce-through-unsafe-model-deserialization","title":"Splunk AI Toolkit RCE through unsafe model deserialization","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:26.023+00:00","url":"https://junglewise.ai/threats/cve-2026-76395-splunk-ai-toolkit-rce-through-unsafe-model-deserialization"},{"cve":"CVE-2026-76394","cvss":8.3,"epss":0.0035,"slug":"cve-2026-76394-splunk-ai-toolkit-missing-authorization-in-rest-api-container","title":"Splunk AI Toolkit missing authorization in REST API container management","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:25.87+00:00","url":"https://junglewise.ai/threats/cve-2026-76394-splunk-ai-toolkit-missing-authorization-in-rest-api-container"},{"cve":"CVE-2026-76393","cvss":5.9,"epss":0.0018,"slug":"cve-2026-76393-splunk-ai-toolkit-race-condition-in-model-upload","title":"Splunk AI Toolkit race condition in model upload","severity":"medium","exploited":false,"published_at":"2026-08-19T22:17:25.737+00:00","url":"https://junglewise.ai/threats/cve-2026-76393-splunk-ai-toolkit-race-condition-in-model-upload"},{"cve":"CVE-2026-76392","cvss":5.4,"epss":0.0023,"slug":"cve-2026-76392-splunk-ai-toolkit-hard-coded-credentials-in-container-connections","title":"Splunk AI Toolkit hard-coded credentials in container connections","severity":"medium","exploited":false,"published_at":"2026-08-19T22:17:25.613+00:00","url":"https://junglewise.ai/threats/cve-2026-76392-splunk-ai-toolkit-hard-coded-credentials-in-container-connections"},{"cve":"CVE-2026-76391","cvss":8.3,"epss":0.0047,"slug":"cve-2026-76391-splunk-ai-toolkit-privilege-escalation-in-agent-run-history","title":"Splunk AI Toolkit privilege escalation in Agent Run History","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:25.487+00:00","url":"https://junglewise.ai/threats/cve-2026-76391-splunk-ai-toolkit-privilege-escalation-in-agent-run-history"},{"cve":"CVE-2026-20266","cvss":9.1,"epss":0.0045,"slug":"cve-2026-20266-splunk-ai-toolkit-os-command-injection-in-btool-configuration","title":"Splunk AI Toolkit OS command injection in btool configuration helper","severity":"critical","exploited":false,"published_at":"2026-06-17T18:17:40.9+00:00","url":"https://junglewise.ai/threats/cve-2026-20266-splunk-ai-toolkit-os-command-injection-in-btool-configuration"},{"cve":"CVE-2026-20265","cvss":4.3,"epss":0.002,"slug":"cve-2026-20265-splunk-ai-toolkit-insecure-default-domain-allowlist","title":"Splunk AI Toolkit insecure default domain allowlist","severity":"medium","exploited":false,"published_at":"2026-06-17T18:17:40.6+00:00","url":"https://junglewise.ai/threats/cve-2026-20265-splunk-ai-toolkit-insecure-default-domain-allowlist"},{"cve":"CVE-2026-20238","cvss":6.5,"slug":"cve-2026-20238-splunk-ai-toolkit-incorrect-authorization-via-srchfilter","title":"Splunk AI Toolkit incorrect authorization via srchFilter inheritance","severity":"medium","exploited":false,"published_at":"2026-05-20T18:16:26.393+00:00","url":"https://junglewise.ai/threats/cve-2026-20238-splunk-ai-toolkit-incorrect-authorization-via-srchfilter"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":9},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Splunk SOAR","slug":"soar","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/soar"},{"name":"Splunk Cloud Platform","slug":"cloud-platform","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/cloud-platform"},{"name":"Splunk Enterprise","slug":"splunk-enterprise","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/splunk-enterprise"},{"name":"Splunk Connect For Kafka","slug":"connect-for-kafka","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/connect-for-kafka"},{"name":"Splunk Secure Gateway","slug":"secure-gateway","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/secure-gateway"},{"name":"Splunk","slug":"splunk","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/splunk"}],"technology":{"hub":true,"name":"Splunk AI Toolkit","slug":"ai-toolkit","vendor":{"name":"Splunk","slug":"splunk","url":"https://junglewise.ai/threats/vendors/splunk"},"aliases":[],"category":"library","homepage":"https://splunkbase.splunk.com/app/6684/","repo_url":"https://github.com/splunk/splunk-app-mltk","description":"A machine learning toolkit for Splunk that provides tools for building and deploying predictive models.","url":"https://junglewise.ai/threats/technologies/ai-toolkit"},"most_severe":[{"cve":"CVE-2026-20266","cvss":9.1,"epss":0.0045,"slug":"cve-2026-20266-splunk-ai-toolkit-os-command-injection-in-btool-configuration","title":"Splunk AI Toolkit OS command injection in btool configuration helper","severity":"critical","exploited":false,"published_at":"2026-06-17T18:17:40.9+00:00","url":"https://junglewise.ai/threats/cve-2026-20266-splunk-ai-toolkit-os-command-injection-in-btool-configuration"},{"cve":"CVE-2026-76395","cvss":8.8,"epss":0.0065,"slug":"cve-2026-76395-splunk-ai-toolkit-rce-through-unsafe-model-deserialization","title":"Splunk AI Toolkit RCE through unsafe model deserialization","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:26.023+00:00","url":"https://junglewise.ai/threats/cve-2026-76395-splunk-ai-toolkit-rce-through-unsafe-model-deserialization"},{"cve":"CVE-2026-76391","cvss":8.3,"epss":0.0047,"slug":"cve-2026-76391-splunk-ai-toolkit-privilege-escalation-in-agent-run-history","title":"Splunk AI Toolkit privilege escalation in Agent Run History","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:25.487+00:00","url":"https://junglewise.ai/threats/cve-2026-76391-splunk-ai-toolkit-privilege-escalation-in-agent-run-history"},{"cve":"CVE-2026-76394","cvss":8.3,"epss":0.0035,"slug":"cve-2026-76394-splunk-ai-toolkit-missing-authorization-in-rest-api-container","title":"Splunk AI Toolkit missing authorization in REST API container management","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:25.87+00:00","url":"https://junglewise.ai/threats/cve-2026-76394-splunk-ai-toolkit-missing-authorization-in-rest-api-container"},{"cve":"CVE-2026-76399","cvss":8.1,"epss":0.0035,"slug":"cve-2026-76399-splunk-ai-toolkit-incorrect-permission-assignment-for-scheduled","title":"Splunk AI Toolkit incorrect permission assignment for scheduled searches","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:26.523+00:00","url":"https://junglewise.ai/threats/cve-2026-76399-splunk-ai-toolkit-incorrect-permission-assignment-for-scheduled"},{"cve":"CVE-2026-76397","cvss":8.1,"epss":0.0035,"slug":"cve-2026-76397-splunk-ai-toolkit-improper-access-control-in-experiment-history","title":"Splunk AI Toolkit improper access control in experiment history","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:26.27+00:00","url":"https://junglewise.ai/threats/cve-2026-76397-splunk-ai-toolkit-improper-access-control-in-experiment-history"},{"cve":"CVE-2026-76396","cvss":7.5,"epss":0.0032,"slug":"cve-2026-76396-splunk-ai-toolkit-improper-access-control-in-scheduled-searches","title":"Splunk AI Toolkit improper access control in scheduled searches","severity":"high","exploited":false,"published_at":"2026-08-19T22:17:26.15+00:00","url":"https://junglewise.ai/threats/cve-2026-76396-splunk-ai-toolkit-improper-access-control-in-scheduled-searches"},{"cve":"CVE-2026-20238","cvss":6.5,"slug":"cve-2026-20238-splunk-ai-toolkit-incorrect-authorization-via-srchfilter","title":"Splunk AI Toolkit incorrect authorization via srchFilter inheritance","severity":"medium","exploited":false,"published_at":"2026-05-20T18:16:26.393+00:00","url":"https://junglewise.ai/threats/cve-2026-20238-splunk-ai-toolkit-incorrect-authorization-via-srchfilter"},{"cve":"CVE-2026-76393","cvss":5.9,"epss":0.0018,"slug":"cve-2026-76393-splunk-ai-toolkit-race-condition-in-model-upload","title":"Splunk AI Toolkit race condition in model upload","severity":"medium","exploited":false,"published_at":"2026-08-19T22:17:25.737+00:00","url":"https://junglewise.ai/threats/cve-2026-76393-splunk-ai-toolkit-race-condition-in-model-upload"},{"cve":"CVE-2026-76392","cvss":5.4,"epss":0.0023,"slug":"cve-2026-76392-splunk-ai-toolkit-hard-coded-credentials-in-container-connections","title":"Splunk AI Toolkit hard-coded credentials in container connections","severity":"medium","exploited":false,"published_at":"2026-08-19T22:17:25.613+00:00","url":"https://junglewise.ai/threats/cve-2026-76392-splunk-ai-toolkit-hard-coded-credentials-in-container-connections"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}