CVE-2026-76358

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0

Description A path traversal issue exists in the archive extraction routine during app installation. This occurs because the system fails to validate that extracted file paths remain within the intended destination directory, allowing a user with app-install privileges to write files outside the designated temporary directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.

Recommendations Update to version 8.6.0 or later.