Critical OS Command Injection Patched in Splunk AI Toolkit

Splunk disclosed a critical vulnerability in Splunk AI Toolkit that allows OS command injection through the btool Configuration Helper, affecting versions earlier than 5.7.4. Tracked as CVE-2026-20266 and rated CVSS 9.1, the flaw stems from unsafe shell execution that can let a user with the Splunk admin role run arbitrary commands on the host running Splunk Enterprise, creating a direct path to host compromise.

Splunk also fixed CVE-2026-20265, a lower-severity insecure default domain allowlist issue rated CVSS 4.3 that could allow a low-privileged user to trigger outbound HTTP requests and potentially exfiltrate data to an attacker-controlled server. The Canadian Centre for Cyber Security highlighted the vendor advisory in AV26-614 and urged administrators to review Splunk’s guidance and upgrade to version 5.7.4 or later; public reporting said there was no confirmed exploitation in the wild at disclosure time.