Executive Summary

CVE-2026-20265 is a vulnerability in Splunk AI Toolkit versions below 5.7.4 that allows a low-privileged user, who does not have admin or power roles, to cause the toolkit to make outbound HTTP requests to servers controlled by an attacker.

This happens because the Splunk AI Toolkit has an insecure default domain allowlist that does not restrict outbound AI agent requests to only approved external domains.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to data exfiltration, as an attacker-controlled server can receive outbound HTTP requests initiated by the vulnerable Splunk AI Toolkit.

This means sensitive data could be leaked without proper authorization, potentially compromising confidentiality.

Useful 0 Not Useful 0

Detection Guidance

No official detection methods or commands are provided by Splunk for this vulnerability.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, upgrade the Splunk AI Toolkit to version 5.7.4 or higher.

Alternatively, manually configure the local/mlspl.conf file to explicitly list approved domains under the [ai:AllowedDomains] stanza and ensure enforce_domain_validation is set to true.

If neither upgrade nor configuration is possible, disable the Splunk AI Toolkit to prevent exploitation.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows low-privileged users to cause the Splunk AI Toolkit to make outbound HTTP requests to attacker-controlled servers, potentially leading to data exfiltration.

Such unauthorized data exfiltration could impact compliance with data protection regulations like GDPR and HIPAA, which require strict controls over personal and sensitive data to prevent unauthorized access or disclosure.

Therefore, if exploited, this vulnerability could lead to violations of these standards by exposing sensitive data to unauthorized parties.

Useful 0 Not Useful 0