CVE-2026-76391

Name of the Vulnerable Software and Affected Versions Splunk AI Toolkit versions prior to 6.0.0

Description Improper privilege management in the Agent Run History handler allows users without admin or power roles to execute searches with system-level privileges. This occurs because the handler replaces the calling user session key with a system authentication token during search operations, enabling unauthorized access to all relevant data, compromise of system integrity, and the ability to read or delete search jobs belonging to other users.

Recommendations Update Splunk AI Toolkit to version 6.0.0 or later.