Splunk Addresses Critical RCE and Multiple High-Severity Flaws Across Key Products
Splunk has released urgent security updates for 17 vulnerabilities, including a critical RCE in its MCP Server app and numerous high-severity flaws in its AI Toolkit and Connect for Kafka applications.
Splunk has issued a significant security advisory detailing fixes for 17 vulnerabilities across several of its popular applications, including Splunk MCP Server, Splunk AI Toolkit, and Splunk Connect for Kafka. The most critical of these, tracked as CVE-2026-76404, is a remote code execution (RCE) vulnerability in the MCP Server app with a CVSS score of 9.1. This flaw, present in versions prior to 1.2.1, allows an authenticated user with administrative privileges to execute arbitrary commands on the underlying operating system by exploiting a deserialization vulnerability in the app's credential management component.
The vulnerability, identified as CWE-502 (deserialization of untrusted data), arises from a lack of input validation, enabling malicious serialized objects to be processed and executed. Splunk strongly recommends upgrading the MCP Server app to version 1.2.1 to mitigate this risk. As an interim measure, disabling or removing the app is advised for organizations unable to patch immediately.
The Splunk AI Toolkit is also affected by nine vulnerabilities, several of which carry high severity ratings. CVE-2026-76395, with a CVSS score of 8.8, permits a user with the 'power' role to achieve RCE by loading a crafted model containing malicious sparse matrix data, exploiting unsafe deserialization of embedded pickle content. Other issues within the AI Toolkit could allow lower-privileged users to execute system-level searches, gain unauthorized control over containers and connections, access or delete other users' experiment history, and manipulate scheduled searches.
Updates for the AI Toolkit are available, with versions below 6.0.0 impacted by most issues. Users on the 5.7 release line should upgrade to version 6.0.0, while those on 6.0 should move to 6.0.1. The advisory also lists specific CVEs and their corresponding fixed versions for the AI Toolkit, addressing flaws ranging from system-level search access to unauthorized data deletion.
Splunk Connect for Kafka has received fixes for four vulnerabilities, including CVE-2026-76402, a high-severity SSRF flaw (CVSS 8.2). This vulnerability could enable an unauthenticated attacker with access to the Kafka Connect REST API to configure a non-secure HTTP Event Collector (HEC) endpoint, leading to the exposure of connector authentication credentials. Additional patches address denial-of-service conditions and improper certificate validation in Kerberos-authenticated HEC deployments.
Beyond these core components, Splunk has also addressed vulnerabilities in Cisco Talos Intelligence for Enterprise Security Cloud (CVE-2026-76389, CVSS 8.8, SSRF) and Splunk On-Call (VictorOps) (CVE-2026-76405, CVSS 4.3, API key exposure). Updated versions for these are 1.0.3 and 1.0.43, respectively.
Splunk's recommendations for all affected users include conducting an inventory of installed Splunk applications, applying all relevant updates promptly, restricting access to management APIs, and reviewing administrative and 'power' role assignments to ensure privileges are not unnecessarily exposed. These updates underscore the ongoing need for diligent patch management across complex software ecosystems.
The breadth of vulnerabilities across multiple Splunk products highlights the interconnected nature of modern software development and the potential for a single vendor to be a target for diverse attack vectors. Organizations relying on Splunk for security monitoring and data analysis must remain vigilant in applying patches to maintain the integrity and security of their environments.