Splunk Ai Toolkit — known CVE vulnerabilities

Every CVE whose affected-product data names Splunk Ai Toolkit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-20266 — CVSS 9.1 (critical): In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running…
• CVE-2026-20238 — CVSS 6.5 (medium): In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential…
• CVE-2026-20265 — CVSS 4.3 (medium): In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the…