Critical OS Command Injection in Splunk AI Toolkit

Splunk disclosed and fixed CVE-2026-20266, a critical OS command injection flaw in the Splunk AI Toolkit's btool configuration helper that can let a user with the Splunk admin role execute arbitrary operating system commands on the underlying host. The vulnerability is classified as CWE-78 and carries a CVSS 9.1 score; it stems from unsafe shell execution in which dynamic parameters are concatenated into a shell-interpreted command string, potentially allowing injected commands to run with the privileges of the splunkd service account.

The issue affects Splunk AI Toolkit versions earlier than 5.7.4 in the 5.7.x branch and requires the AI Toolkit to be installed and active for exploitation. Splunk addressed the flaw in version 5.7.4, and downstream security notices have highlighted the update as part of broader Splunk security guidance. Reporting on the bug also noted similarities to CVE-2026-20163, pointing to a recurring risk pattern around shell interpretation in privileged Splunk components.