CVE-2026-20265: Insecure Default Domain Allowlist in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration.
The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Splunk AI Toolkitto a version that resolves this vulnerability.Fixed in 5.7.4 - Configuration
Configure the Splunk AI Toolkit default domain allowlist to restrict outbound AI agent requests to only approved external domains (remove or disallow unspecified/untrusted domains).
Splunk AI Toolkit default domain allowlist = restrict to approved external domains
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20265?
The severity of CVE-2026-20265 is medium with a CVSS score of 4.3.
How do I fix CVE-2026-20265?
To fix CVE-2026-20265, upgrade the Splunk AI Toolkit to version 5.7.4 or later.
What impact does CVE-2026-20265 have on my system?
CVE-2026-20265 can allow low-privileged users to exfiltrate data by making unauthorized outbound HTTP requests.
Who is affected by CVE-2026-20265?
CVE-2026-20265 affects users of Splunk AI Toolkit versions below 5.7.4.
What is the nature of CVE-2026-20265?
CVE-2026-20265 is due to an insecure default domain allowlist allowing low-privileged users to exploit outbound HTTP requests.