CVE-2026-20265

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20265", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.402Z", "datePublished": "2026-06-17T17:07:19.943Z", "dateUpdated": "2026-06-17T18:04:30.312Z"}, "containers": {"cna": {"affected": [{"product": "Splunk AI Toolkit", "vendor": "Splunk", "versions": [{"version": "5.7", "status": "affected", "versionType": "custom", "lessThan": "5.7.4"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. \n\nThe vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains."}], "value": "In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. \n\nThe vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains."}], "references": [{"url": "https://advisory.splunk.com/advisories/SVD-2026-0613"}], "title": "Insecure Default Domain Allowlist in Splunk AI Toolkit", "datePublic": "2026-06-17T00:00:00.000Z", "metrics": [{"cvssV3_1": {"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "description": "The software initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.", "cweId": "CWE-1188"}]}], "source": {"advisory": "SVD-2026-0613"}, "credits": [{"lang": "en", "value": "Gabriel Nitu, Splunk"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-06-17T17:07:19.943Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-17T18:04:24.981105Z", "id": "CVE-2026-20265", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-17T18:04:30.312Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20265", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-17T18:04:24.981105Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-17T18:04:27.161Z"}}], "cna": {"title": "Insecure Default Domain Allowlist in Splunk AI Toolkit", "source": {"advisory": "SVD-2026-0613"}, "credits": [{"lang": "en", "value": "Gabriel Nitu, Splunk"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Splunk", "product": "Splunk AI Toolkit", "versions": [{"status": "affected", "version": "5.7", "lessThan": "5.7.4", "versionType": "custom"}]}], "datePublic": "2026-06-17T00:00:00.000Z", "references": [{"url": "https://advisory.splunk.com/advisories/SVD-2026-0613"}], "descriptions": [{"lang": "en", "value": "In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. \n\nThe vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.", "supportingMedia": [{"type": "text/html", "value": "In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. \n\nThe vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-1188", "description": "The software initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure."}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-06-17T17:07:19.943Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20265", "state": "PUBLISHED", "dateUpdated": "2026-06-17T18:04:30.312Z", "dateReserved": "2025-10-08T11:59:15.402Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-06-17T17:07:19.943Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Splunk AI Toolkit", "vendor": "Splunk", "versions": [{"lessThan": "5.7.4", "status": "affected", "version": "5.7", "versionType": "custom"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:splunk:ai_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "433FFA09-42E8-4DB0-8677-0357A6458FA4", "versionEndExcluding": "5.7.4", "versionStartIncluding": "5.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. \n\nThe vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains."}, {"lang": "es", "value": "En versiones de Splunk AI Toolkit anteriores a la 5.7.4, un usuario con privilegios bajos que no posee los roles de Splunk \u2019admin\u2019 o \u2019power\u2019 podr\u00eda hacer que Splunk AI Toolkit realizara solicitudes salientes a trav\u00e9s de HTTP a un servidor que un atacante controla, lo que podr\u00eda permitir la exfiltraci\u00f3n de datos.\n\nLa vulnerabilidad existe debido a una lista de dominios permitidos (allowlist) predeterminada e insegura en Splunk AI Toolkit, que no restringe las solicitudes salientes del agente de IA a dominios externos aprobados."}], "id": "CVE-2026-20265", "lastModified": "2026-10-26T11:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20265", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-17T18:04:24.981105Z", "version": "2.0.3"}}]}, "published": "2026-06-17T18:17:40.600", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory", "Mitigation"], "url": "https://advisory.splunk.com/advisories/SVD-2026-0613"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1188"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.7,5.7.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Splunk AI Toolkit", "source": "cna", "vendor": "Splunk"}, "product": "splunk_ai_toolkit", "vendor": "splunk"}], "created": "2026-06-18T18:45:03.683131+00:00", "updated": "2026-06-18T18:45:03.839910+00:00", "vendors": ["splunk", "splunk$PRODUCT$splunk_ai_toolkit"]}