CVE-2026-20266: splunk ai_toolkit OS Command Injection
Vulnerability summary
CVE-2026-20266 is a critical (CVSS 9.1) OS Command Injection vulnerability in splunk ai_toolkit. EPSS estimates a 0.63% chance of exploitation in the next 30 days, higher than 49.3% of scored vulnerabilities.
Timeline
- 17-06-2026PublishedVulnerability first disclosed.
- 17-06-2026Last modifiedVulnerability information updated.
Description
In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which constructs OS command strings from dynamic parameters without disabling shell interpretation.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST9.1CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.63%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
0.00 pp
From 0.63% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Splunk2 products
- ai_toolkit≥ 5.7.0, < 5.7.4
- splunk ai toolkit≥ 5.7, < 5.7.4
1 vendor · 2 products
References
1 links- advisory.splunk.com/advisories/SVD-2026-0614Vendor Advisory