CVE-2026-76404

Name of the Vulnerable Software and Affected Versions Splunk MCP Server app versions prior to 1.2.1

Description Users with the admin Splunk role can execute arbitrary commands on the underlying operating system. This occurs due to missing input validation within the credential management component, which performs deserialization—the process of converting stored data back into an object—without verifying if the content matches the expected type.

Recommendations Update Splunk MCP Server app to version 1.2.1 or later.