Critical Splunk MCP Server RCE & AI Toolkit Patches
Menu
Home<br>AI & Emerging Tech<br>Breaking News<br>Cybersecurity News<br>Data Breaches<br>Guides & Tips<br>Vulnerabilities & Fixes<br>About Us
AI & EMERGING TECH
Splunk Patches Critical MCP Server RCE and 16 Other Security Flaws Across AI Toolkit, Kafka Apps
Uday Patil<br>Aug 20, 2026<br>5 min read<br>10 views
Share:
Splunk has released security updates for 17 vulnerabilities affecting several apps and add-ons, including Splunk MCP Server, Splunk AI Toolkit, and Splunk Connect for Kafka.<br>The most severe issue, tracked as CVE-2026-76404, is a critical splunk mcp server rce (remote code execution) vulnerability with a CVSS score of 9.1. The August 2026 advisory also covers Cisco Talos Intelligence for Enterprise Security Cloud and Splunk On-Call (VictorOps).<br>Organizations using the affected components should prioritize upgrades, especially where administrative interfaces, REST APIs, or AI model-management features are exposed to untrusted users or networks.<br>Table of Contents
Toggle
Splunk Patches Security Flaws<br>CVE-2026-76404 affects Splunk MCP Server app versions earlier than 1.2.1. Splunk said an authenticated user with the admin role could execute arbitrary commands on the underlying operating system.<br>The flaw exists in the app’s credential-management component. Missing input validation allows unsafe deserialization of stored data without confirming that the supplied content has the expected type.<br>This creates a path for malicious serialized objects to execute commands. The vulnerability is categorized as CWE-502, or deserialization of untrusted data. Administrators should upgrade the Splunk MCP Server app to version 1.2.1 immediately.<br>Until patching is complete, Splunk recommends disabling or removing the app. Splunk AI Toolkit received fixes for nine vulnerabilities, including several high-severity access-control and code-execution flaws.<br>The most serious, CVE-2026-76395, carries a CVSS score of 8.8 and could allow a user with the power role to run arbitrary code on a Splunk server by loading a crafted model containing malicious sparse matrix data. The issue stems from unsafe deserialization of embedded pickle content.<br>Other AI Toolkit flaws could allow lower-privileged users to perform searches with system-level privileges, manage containers and connections without proper authorization, access or delete other users’ experiment history, and modify scheduled searches that run under the search owner’s permissions.<br>Splunk AI Toolkit versions below 6.0.0 are affected by most of these issues, while two flaws affect versions below 6.0.1. Users on the 5.7 release line should upgrade to version 6.0.0, while users already on version 6.0 should move to 6.0.1.<br>Complete Vulnerability Summary (Mobile-Friendly)<br>Cisco Talos Intelligence<br>CVE-2026-76389 (High – CVSS 8.8)<br>Issue: SSRF may expose tokens. Fixed Version: 1.0.3<br>CVE-2026-76390 (Medium – CVSS 5.3)<br>Issue: OpenAPI spec exposure. Fixed Version: 1.0.3<br>Splunk AI Toolkit<br>CVE-2026-76391 (High – CVSS 8.3)<br>Issue: System-level search access. Fixed Version: 6.0.0<br>CVE-2026-76392 (Medium – CVSS 5.4)<br>Issue: Predictable credentials. Fixed Version: 6.0.0<br>CVE-2026-76393 (Medium – CVSS 5.9)<br>Issue: Model replacement via race condition. Fixed Version: 6.0.0<br>CVE-2026-76394 (High – CVSS 8.3)<br>Issue: Unauthorized container control. Fixed Version: 6.0.0<br>CVE-2026-76395 (High – CVSS 8.8)<br>Issue: Malicious model RCE via unsafe pickle deserialization. Fixed Version: 6.0.0<br>CVE-2026-76396 (High – CVSS 7.5)<br>Issue: Unsafe model deserialization. Fixed Version: 6.0.0<br>CVE-2026-76397 (High – CVSS 8.1)<br>Issue: Unauthorized experiment data access. Fixed Version: 6.0.0<br>CVE-2026-76398 (Medium – CVSS 4.3)<br>Issue: Unauthorized history deletion. Fixed Version: 6.0.1<br>CVE-2026-76399 (High – CVSS 8.1)<br>Issue: Scheduled search manipulation. Fixed Version: 6.0.1<br>Splunk Connect for Kafka<br>CVE-2026-76400 (Medium – CVSS 5.9)<br>Issue: Event delivery disruption. Fixed Version: 2.2.7<br>CVE-2026-76401 (Medium – CVSS 5.9)<br>Issue: Connector worker DoS. Fixed Version: 2.2.7<br>CVE-2026-76402 (High – CVSS 8.2)<br>Issue: Credential exposure via HEC. Fixed Version: 2.2.7<br>CVE-2026-76403 (High – CVSS 7.4)<br>Issue: Data interception/modification. Fixed Version: 2.2.7<br>MCP Server and VictorOps<br>CVE-2026-76404 (Critical – CVSS 9.1)<br>Issue: OS command execution (RCE). Fixed Version: 1.2.1<br>CVE-2026-76405 (Medium – CVSS 4.3)<br>Issue: Partial API key exposure in Splunk On-Call. Fixed Version: 1.0.43<br>Splunk Connect for Kafka version 2.2.7 addresses four vulnerabilities. These include an SSRF flaw, CVE-2026-76402, rated 8.2, which could allow an unauthenticated attacker with access to the Kafka Connect REST API to configure a non-secure HTTP Event Collector endpoint and capture connector authentication credentials.<br>The Kafka fixes also address two denial-of-service issues and improper certificate validation in Kerberos-authenticated HTTP Event Collector deployments.<br>Splunk advises restricting Kafka Connect REST API...