CVE-2026-76391

Received Received - Intake

Privilege Escalation in Splunk AI Toolkit

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: Cisco Systems, Inc.

Description

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users through Agent Run History. The improper privilege management is possible because the Agent Run History handler replaces the calling user session key with a system authentication token before it performs search operations. For more information see AI Toolkit Agent Launchpad (https://help.splunk.com/en/splunk-enterprise/apply-machine-learning/use-ai-toolkit/6.0.0/ai-toolkit-connections-containers-and-agents/ai-toolkit-agent-launchpad) in the Splunk documentation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-19

Generated

2026-08-20

AI Q&A

2026-08-20

EPSS Evaluated

N/A

NVD

CVE-2026-76391

EUVD

EUVD-2026-62956

Affected Vendors & Products

Vendor	Product	Version / Range
splunk	ai_toolkit	to 6.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

In Splunk AI Toolkit versions below 6.0.0, a non-admin user could run searches with system-level privileges. This happens because the Agent Run History handler replaces the user's session key with a system token before executing searches. This improper privilege management allows unauthorized access to data, system integrity changes, and manipulation of other users' search jobs.

Detection Guidance

Detecting this vulnerability requires checking Splunk AI Toolkit versions and reviewing Agent Run History for unauthorized access. Verify installed versions with Splunk's app management interface or CLI commands like 'splunk list app' or 'splunk show version'. Inspect Agent Run History for unusual search jobs or privilege escalations.

Impact Analysis

If exploited, this vulnerability could allow an attacker to access sensitive data, modify system settings, or delete other users' search jobs. This could lead to data breaches, unauthorized system changes, or disruption of Splunk operations.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Non-compliance risks include legal penalties, fines, and reputational damage.

Mitigation Strategies

Upgrade Splunk AI Toolkit to version 6.0.0 or later immediately. Restrict access to 'admin' and 'power' roles for sensitive operations. Review and audit Agent Run History for unauthorized activities. Apply principle of least privilege to all user roles.

Hi! I’m here to help you understand CVE-2026-76391. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70