CVE-2026-76396

creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtihnf3bf22r...

CVE-2026-76396

Splunk AI Toolkit versions below 6.0.0 fail to mark the apply search command as risky, allowing users with the schedule_search capability to trigger deserialization of arbitrary model files via scheduled searches. This can lead to code execution with high confidentiality, integrity, and availabil...

CVE-2026-76396 Improper Access Control through Scheduled Searches in Splunk AI Toolkit

In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedulesearch capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splunk AI Toolkit does not mark the apply...