PT-2026-78824 · Splunk · Splunk Ai Toolkit
CVE-2026-76397
·
Published
2026-08-19
·
Updated
2026-08-21
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Splunk AI Toolkit versions prior to 6.0.0
Description
A user with the "power" Splunk role can access and delete experiment history data belonging to other users. This occurs because the application fails to preserve the trusted experiment scope when processing query values controlled by the caller before accessing restricted history data.
Recommendations
Update Splunk AI Toolkit to version 6.0.0 or later.
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Splunk Ai Toolkit