CVE-2026-76395

Received Received - Intake

Arbitrary Code Execution in Splunk AI Toolkit via Untrusted Model Deserialization

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: Cisco Systems, Inc.

Description

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a model codec in Splunk AI Toolkit deserializes sparse matrix data without guarding against embedded pickle content. For more information see Troubleshoot the Splunk Machine Learning Toolkit (https://help.splunk.com/en/splunk-cloud-platform/apply-machine-learning/machine-learning-toolkit-user-guide/5.5.0/troubleshooting-mltk/troubleshoot-the-splunk-machine-learning-toolkit) in the Splunk documentation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-19

Generated

2026-08-20

AI Q&A

2026-08-20

EPSS Evaluated

N/A

NVD

CVE-2026-76395

EUVD

EUVD-2026-62960

Affected Vendors & Products

Vendor	Product	Version / Range
splunk	splunk_ai_toolkit	to 6.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

In Splunk AI Toolkit versions below 6.0.0, a user with the 'power' role can execute arbitrary code on the Splunk server by loading a model file with crafted sparse matrix data. This happens because the toolkit's model codec deserializes sparse matrix data without blocking embedded pickle content, enabling deserialization of untrusted data.

Impact Analysis

An attacker with the 'power' role could gain full control over the Splunk server, leading to unauthorized access, data theft, or disruption of services. This could compromise sensitive information stored in Splunk and allow further attacks within the network.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Upgrade Splunk AI Toolkit to version 6.0.0 or higher to address the arbitrary code execution vulnerability. Restrict the 'power' role to trusted users only and avoid loading untrusted model files.

Hi! I’m here to help you understand CVE-2026-76395. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70