CVE-2026-20266

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which constructs OS command strings from dynamic parameters without disabling shell interpretation.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://advisory.splunk.com/advisories/SVD-2026-0614	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*

History

22 Jun 2026, 12:48

Type	Values Removed	Values Added
First Time		Splunk Splunk ai Toolkit
CPE		cpe:2.3:a:splunk:ai_toolkit::::::::
References	~~() https://advisory.splunk.com/advisories/SVD-2026-0614 -~~	() https://advisory.splunk.com/advisories/SVD-2026-0614 - Vendor Advisory

17 Jun 2026, 20:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-17 18:17

Updated : 2026-06-22 12:48

NVD link : CVE-2026-20266

Mitre link : CVE-2026-20266

CVE.ORG link : CVE-2026-20266

JSON object : View

Products Affected

splunk

ai_toolkit

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-20266", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20266", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-17T18:03:52.980872Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Splunk", "product": "Splunk AI Toolkit", "versions": [{"status": "affected", "version": "5.7", "lessThan": "5.7.4", "versionType": "custom"}]}]}], "published": "2026-06-17T18:17:40.900", "references": [{"url": "https://advisory.splunk.com/advisories/SVD-2026-0614", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-78"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "In Splunk AI Toolkit versions below 5.7.4, a user who holds the \"admin\" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. \n\nThe vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which constructs OS command strings from dynamic parameters without disabling shell interpretation."}], "lastModified": "2026-06-22T12:48:37.440", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "433FFA09-42E8-4DB0-8677-0357A6458FA4", "versionEndExcluding": "5.7.4", "versionStartIncluding": "5.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}