CVE-2026-20265— Splunk AI Toolkit 配置错误漏洞

Insecure Default Domain Allowlist in Splunk AI Toolkit

In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration. The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

不安全的默认资源初始化

Splunk AI Toolkit 配置错误漏洞

AI Toolkit是美国Splunk公司的一个机器学习工具包 Splunk AI Toolkit 5.7.4之前版本存在配置错误漏洞，该漏洞源于不安全的默认域名允许列表，未限制出站AI代理请求到批准的外部域名，可能导致低权限用户通过HTTP向攻击者控制的服务器发送出站请求，从而造成数据渗漏。

N/A

N/A