The vulnerability of the Splunk Enterprise platform for operational analysis lies in the improper assignment of permissions to critical resources. This allows a perpetrator to gain access to the installation directory (by default, C:\Program Files\Splunk) and all its contents.

🗓️ 24 Dec 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Splunk Enterprise vulnerability from improper permissions exposing C:\Program Files\Splunk.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-20386	3 Dec 202521:46	–	circl
CNNVD	Splunk Enterprise 安全漏洞	3 Dec 202500:00	–	cnnvd
CVE	CVE-2025-20386	3 Dec 202517:00	–	cve
Cvelist	CVE-2025-20386 Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade	3 Dec 202517:00	–	cvelist
EUVD	EUVD-2025-201003	3 Dec 202517:00	–	euvd
NCSC	Vulnerabilities fixed in Splunk Enterprise and Splunk Cloud Platform	8 Dec 202508:23	–	ncsc
NVD	CVE-2025-20386	3 Dec 202517:15	–	nvd
OSV	CVE-2025-20386	3 Dec 202517:15	–	osv
Positive Technologies	PT-2025-48958	3 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20386	4 Dec 202517:16	–	redhatcve

Vulners

Node

splunk splunk_enterpriseRange<10.0.2

OR

splunk splunk_enterpriseRange9.4.0–9.4.6

OR

splunk splunk_enterpriseRange9.3.0–9.3.8

OR

splunk splunk_enterpriseRange9.2.0–9.2.10

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2025-1205
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2025120404
web	www.web.nvd.nist.gov/view/vuln/detail

24 Dec 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 38

CVSS 29

EPSS0.0048

splunk enterprise improper permissions installation directory program files splunk