MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2026-76392

CVSS 5.4v3.1pub. 2026-08-19upd. 2026-08-26

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container services. The use of hard-coded credentials is possible because Splunk AI Toolkit generates or stores credentials for connected container services using predictable or hard-coded default values. For more information see Connections tab in the AI Toolkit (https://help.splunk.com/en/splunk-cloud-platform/apply-machine-learning/use-ai-toolkit/5.7.2/ai-toolkit-commands-macros-and-visualizations/connections-tab-in-the-ai-toolkit) in the Splunk documentation.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
  • Splunk Ai Toolkit

    APP
    Splunk
    5.7.0 – 6.0.0 (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Container
CWE
References

Related vulnerabilities

CVE-2026-20266CRITICAL9.1PL ✓same product

Command Injection w Splunk AI Toolkit — wykonanie poleceń OS przez administratora

CVE-2026-76394HIGH8.3same product

In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splu...

CVE-2026-76399HIGH8.1same product

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided ...

CVE-2026-76391HIGH8.3same product

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could ...

CVE-2026-76395HIGH8.8same product

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary co...