Splunk AI Toolkit btool Helper Enables OS Command Injection for Admins

Splunk AI Toolkit versions prior to 5.7.4 contain an OS command injection flaw that lets any user with the admin role execute arbitrary shell commands on the host running Splunk Enterprise.

What happened

The btool configuration helper builds command strings from user‑supplied parameters without disabling shell interpretation, creating a classic CWE‑78 injection vector. An attacker with admin privileges can trigger the helper to run any command on the underlying operating system.

Impact

Full system compromise is possible, as the attacker gains the privileges of the Splunk process. The vulnerability is rated CVSS v3.1 9.1 (Critical) and is exploitable over the network from any authenticated admin session.

What to do

• Upgrade Splunk AI Toolkit to version 5.7.4 or later.
• If an upgrade is not feasible, uninstall the Splunk AI Toolkit entirely.
• Verify that no admin users remain with unnecessary privileges; consider least‑privilege hardening.
• Monitor for suspicious shell activity on the Splunk host and audit the btool helper logs.

CVE-2026-20266