CVE-2026-20265
Medium
Description
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.
SeverityMedium
CVSS4.3
Exploit probability—
ProductSplunk Ai Toolkit
PublishedJun 17, 2026
First seenJun 17, 2026
Weakness typeCWE-1188CWE-1188
How to fix
Update
- splunk ai_toolkit5.7.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| splunk ai_toolkit | 5.7.0 ≤ v < 5.7.4 | 5.7.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.