Vulnerabilities
Splunk AI Toolkit 5.7.4 Vulnerability: Insecure Default Domain Allowlist Enables Low‑Privileged Data Exfiltration
A flaw in Splunk AI Toolkit versions below 5.7.4 allows low‑privileged users to trigger outbound HTTP requests to attacker‑controlled domains, potentially leaking data. The issue stems from an unrestricted default allowlist. Defenders should upgrade to 5.7.4 or configure explicit domain restrictions.
Splunk AI Toolkit versions prior to 5.7.4 contain a misconfiguration that permits low‑privileged users to direct the AI agent to send HTTP requests to arbitrary domains. This can lead to data exfiltration if an attacker controls the target server.
What Happened
- Insecure default allowlist in the AI Toolkit allows outbound requests to any domain.
- Users lacking admin or power roles can trigger these requests.
Impact
- Potential exfiltration of internal data over HTTP.
- CVSS v3.1 score 4.3 (Medium); CVE‑2026‑20265.
What to Do
- Upgrade to Splunk AI Toolkit 5.7.4 or later.
- If upgrade is not possible, edit local/mlspl.conf: set allowed_domains to a whitelist and ensure enforce_domain_validation=true.
- Alternatively, disable or remove the AI Toolkit app.
Detection
- No built‑in detection; monitor outbound HTTP traffic from the AI agent for anomalous destinations.
Related vulnerabilities
Splunk AI Toolkit btool Helper Enables OS Command Injection for Admins
A critical OS command injection flaw exists in Splunk AI Toolkit versions below 5.7.4, allowing users with the admin role to run arbitrary commands on the host. The issue stems from unsafe shell execution in the btool configuration helper. Defenders should immediately upgrade to 5.7.4 or later, or uninstall the toolkit to eliminate the risk.
Read briefing
NoMachine Redis Authentication Flaw Enables Local Privilege Escalation (CVE-2026-92209)
A flaw in NoMachine’s Redis authentication allows local attackers to elevate privileges after gaining low‑privileged code execution. The issue stems from weak credential generation and affects versions prior to v10.1.7, v9.9.6, and v8.27.1. Defenders should patch immediately and monitor for local privilege escalation attempts.
Read briefing
Linux Kernel OpenvSwitch Race Condition Enables Local Privilege Escalation (CVE‑2026‑74465)
A race condition in the Linux kernel’s OpenvSwitch dp_meter handling allows local attackers to gain root privileges after executing low‑privileged code. The flaw is fixed in a kernel commit and requires immediate patching. Defenders should update kernels, audit OpenvSwitch usage, and monitor for suspicious dp_meter activity.
Read briefing
OpenOffice Versions <4.1.17 Vulnerable to Remote Code Execution (CVE‑2026‑59265, CVE‑2026‑63277)
Multiple CVEs have been identified in OpenOffice versions older than 4.1.17 that enable remote code execution. The flaws allow an attacker to trigger arbitrary code on a target system via crafted documents. Defenders must apply the vendor’s patches immediately or upgrade to a supported release.
Read briefing