splunk_advisories
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Jun 17, 2026 00:00 UTC
- Retrieved
- Oct 08, 2026 03:55 UTC
SVD-2026-0613: Insecure Default Domain Allowlist in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the “admin” or “power” Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outboun
Reference details
- Source category
- Vendor advisories
- Report title
SVD-2026-0613: Insecure Default Domain Allowlist in Splunk AI Toolkit- First reported
- Jun 17, 2026 00:00 UTC
- Last reported
- Jun 17, 2026 00:00 UTC
- Catalog updated
- Oct 08, 2026 03:55 UTC
- Record ID
1b73e817289a87b57ca28f4dae0c7a05d680e90e429c4a5b2927a50d7d9b7cd0
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.