Splunk: 25 Vulnerabilities Disclosed, Including Critical RCE and Credential Exposures
Key findings • 25 CVEs disclosed on August 19, 2026, affecting Splunk MCP Server, AI Toolkit, Kafka Connect, Enterprise Security, and SOAR apps. • Critical RCE vulnerability (CVE-2026-76404) …
Key findings
- 25 CVEs disclosed on August 19, 2026, affecting Splunk MCP Server, AI Toolkit, Kafka Connect, Enterprise Security, and SOAR apps.
- Critical RCE vulnerability (CVE-2026-76404) in Splunk MCP Server app with CVSS 9.1.
- Multiple high-severity flaws in Splunk AI Toolkit allow arbitrary code execution and privilege escalation.
- Numerous medium-severity vulnerabilities in Splunk SOAR apps expose passwords and sensitive credentials in cleartext.
- Patches are available for all disclosed vulnerabilities across the affected Splunk products and apps.
On August 19, 2026, a significant batch of 25 vulnerabilities was disclosed across multiple Splunk products, including Splunk MCP Server, Splunk Connect for Kafka, Splunk AI Toolkit, Splunk Enterprise Security, and various Splunk SOAR apps. The disclosures, all occurring on the same day, highlight a range of security weaknesses, from critical remote code execution to medium-severity information disclosure. The most severe vulnerability, CVE-2026-76404, a critical RCE flaw in Splunk MCP Server app, underscores the potential impact of these findings.
Several vulnerabilities cluster around specific Splunk applications:
Splunk AI Toolkit Vulnerabilities
A substantial portion of the disclosed CVEs affect the Splunk AI Toolkit, with versions below 6.0.0 and 6.0.1 being impacted. These include high-severity flaws such as arbitrary code execution (CVE-2026-76395) due to deserialization of untrusted data, and privilege escalation allowing users to run searches with system-level privileges (CVE-2026-76391). Other issues in the AI Toolkit involve improper access control leading to data exposure (CVE-2026-76397, CVE-2026-76399), insecure handling of credentials (CVE-2026-76392), and race conditions allowing for model overwrites (CVE-2026-76393).
Splunk Connect for Kafka Vulnerabilities
Versions of Splunk Connect for Kafka below 2.2.7 are affected by multiple medium and high-severity vulnerabilities. These include the potential for unauthenticated users to read or alter data when Kerberos is used with HTTP Event Collector (CVE-2026-76403), and the ability to configure insecure HTTP Event Collector endpoints, leading to credential exposure (CVE-2026-76402). Additionally, denial-of-service conditions by blocking Kafka Connect worker threads (CVE-2026-76401) and issues with event retries (CVE-2026-76400) were reported.
Splunk SOAR App Vulnerabilities
A significant number of medium-severity vulnerabilities were disclosed across various Splunk SOAR apps, primarily involving the cleartext exposure of sensitive passwords and credentials. Versions of apps such as Zoom (below 3.2.2), Venafi (below 2.1.4), Splunk Attack Analyzer Connector (below 2.2.1), RSA SecurID Authentication Manager (below 1.0.5), Phantom (below 3.8.5), MS Graph for Active Directory (below 1.5.2), and Cisco Webex (below 2.2.1) are affected. These flaws allow users with action execution permissions to inadvertently expose meeting passwords, keystore passwords, archive passwords, token serials, and temporary passwords.
Other Affected Products
Beyond these clusters, other Splunk products also saw vulnerabilities disclosed. Splunk Enterprise Security versions below 8.6.1 are affected by high-severity flaws allowing for the modification of UEBA search macros (CVE-2026-76388) and SPL injection through investigation queue filters (CVE-2026-76387). Splunk On-Call (VictorOps) app versions below 1.0.43 have a medium-severity vulnerability allowing unauthorized users to read partially masked API keys (CVE-2026-76405). Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3 are impacted by a high-severity vulnerability allowing crafted requests to trigger outbound requests to arbitrary hosts (CVE-2026-76389).
The disclosures highlight a broad range of security weaknesses across Splunk's ecosystem. Users are strongly advised to consult Splunk's security advisories and apply the necessary updates to mitigate these risks, particularly those involving remote code execution and sensitive data exposure. The sheer volume and variety of vulnerabilities underscore the importance of regular patching and security reviews for all Splunk deployments.
The patched versions include Splunk MCP Server app versions 1.2.1 and later, Splunk Connect for Kafka versions 2.2.7 and later, Splunk AI Toolkit versions 6.0.0 and 6.0.1 and later, Splunk Enterprise Security versions 8.6.1 and later, Splunk On-Call (VictorOps) app versions 1.0.43 and later, Cisco Talos Intelligence for Enterprise Security Cloud versions 1.0.3 and later, and the various Splunk SOAR apps with their respective updated versions.
This extensive batch of vulnerabilities, disclosed on a single day, emphasizes the need for prompt attention from Splunk users. The critical RCE vulnerability in Splunk MCP Server and the numerous credential exposure issues in SOAR apps represent significant risks that should be prioritized for remediation. Staying informed about Splunk's security advisories and applying patches promptly is crucial for maintaining a secure environment.