CVE catalog
CVE-2026-20265
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a serve
- Severity
- Medium · CVSS 4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.22% · Oct 25, 2026
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Cpe | ai_toolkit | Not reported | 5.7.4 | fixed |
| Cpe | ai_toolkit | Not reported | 5.7.4 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Cpe | ai_toolkit | cpe | Not reported | 5.7.4 | Not reported | Not reported | Not reported |
| Cpe | ai_toolkit | cpe | Not reported | 5.7.4 | Not reported | NVD-CVE-2026-20265 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: