CVE-2025-20381

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-20381", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2024-10-10T19:15:13.263Z", "datePublished": "2025-12-03T17:00:25.945Z", "dateUpdated": "2025-12-03T21:29:51.839Z"}, "containers": {"cna": {"affected": [{"product": "Splunk MCP Server", "vendor": "Splunk", "versions": [{"version": "0.2", "status": "affected", "versionType": "custom", "lessThan": "0.2.4"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "In Splunk MCP Server app versions below 0.2.4, a user with access to the \"run_splunk_query\" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions."}], "value": "In Splunk MCP Server app versions below 0.2.4, a user with access to the \"run_splunk_query\" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions."}], "references": [{"url": "https://advisory.splunk.com/advisories/SVD-2025-1210"}], "title": "SPL commands allowlist controls bypass in Splunk MCP Server app through \"run_splunk_query\" MCP tool", "datePublic": "2025-12-03T00:00:00.000Z", "metrics": [{"cvssV3_1": {"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.1", "baseScore": 5.4, "baseSeverity": "MEDIUM"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "description": "The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.", "cweId": "CWE-863"}]}], "source": {"advisory": "SVD-2025-1210"}, "credits": [{"lang": "en", "value": "Saket Pandey, Splunk"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-12-03T17:00:25.945Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-03T21:29:38.813869Z", "id": "CVE-2025-20381", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-03T21:29:51.839Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-20381", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-03T21:29:38.813869Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-03T21:29:45.690Z"}}], "cna": {"title": "SPL commands allowlist controls bypass in Splunk MCP Server app through \"run_splunk_query\" MCP tool", "source": {"advisory": "SVD-2025-1210"}, "credits": [{"lang": "en", "value": "Saket Pandey, Splunk"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Splunk", "product": "Splunk MCP Server", "versions": [{"status": "affected", "version": "0.2", "lessThan": "0.2.4", "versionType": "custom"}]}], "datePublic": "2025-12-03T00:00:00.000Z", "references": [{"url": "https://advisory.splunk.com/advisories/SVD-2025-1210"}], "descriptions": [{"lang": "en", "value": "In Splunk MCP Server app versions below 0.2.4, a user with access to the \"run_splunk_query\" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions.", "supportingMedia": [{"type": "text/html", "value": "In Splunk MCP Server app versions below 0.2.4, a user with access to the \"run_splunk_query\" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-863", "description": "The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions."}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-12-03T17:00:25.945Z"}}}, "cveMetadata": {"cveId": "CVE-2025-20381", "state": "PUBLISHED", "dateUpdated": "2025-12-03T21:29:51.839Z", "dateReserved": "2024-10-10T19:15:13.263Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2025-12-03T17:00:25.945Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Splunk MCP Server", "vendor": "Splunk", "versions": [{"lessThan": "0.2.4", "status": "affected", "version": "0.2", "versionType": "custom"}]}], "source": "psirt@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Splunk MCP Server app versions below 0.2.4, a user with access to the \"run_splunk_query\" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions."}, {"lang": "es", "value": "En versiones de la aplicaci\u00f3n Splunk MCP Server inferiores a 0.2.4, un usuario con acceso a la herramienta \u201crun_splunk_query\u201d del Protocolo de Contexto de Modelo (MCP) podr\u00eda eludir los controles de la lista de permitidos de comandos SPL en MCP al incrustar comandos SPL como subb\u00fasquedas, lo que lleva a acciones no autorizadas m\u00e1s all\u00e1 de las restricciones previstas de MCP."}], "id": "CVE-2025-20381", "lastModified": "2026-10-18T17:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-20381", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-03T21:29:38.813869Z", "version": "2.0.3"}}]}, "published": "2025-12-03T17:15:50.180", "references": [{"source": "psirt@cisco.com", "url": "https://advisory.splunk.com/advisories/SVD-2025-1210"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"created": "2025-12-04T16:44:17.408231+00:00", "updated": "2025-12-04T16:44:17.408256+00:00", "vendors": ["splunk", "splunk$PRODUCT$mcp_server"]}