Security Hardening Release for Splunk Apps and Add-ons - August 2026

What it is

Splunk advisory SVD-2026-0808 (published 2026-08-19), a hardening release fixing multiple CVEs across five apps/add-ons: Cisco Talos Intelligence for Enterprise Security Cloud, Splunk AI Toolkit, Splunk Connect for Kafka, Splunk MCP Server, and Splunk On-Call (VictorOps). The advisory lists a highest CVSSv3.1 of 9.1 (Critical) — higher than any CVE named in the catalog summary. That top score is not attached to any of the fully-described CVEs (which cap at 8.8); the page text cuts off at CVE-2026-76393 (race condition during model upload via the REST API), so the 9.1 belongs to a vuln the summary does not characterize. Treat this as more severe than the summary implies.

Preconditions / Affected

• CVE-2026-76389 (SSRF, 8.8) — Talos below 1.0.3; requires a role holding the get_talos_enrichment capability. The endpoint accepts the destination for authenticated Splunk management requests from request data, so a crafted request drives an outbound call to an attacker server, exposing tokens.
• CVE-2026-76390 (info disclosure, 5.3) — Talos below 1.0.3; unauthenticated. OpenAPI spec is packaged in a static path Splunk Web serves without auth.
• CVE-2026-76391 (priv mgmt, 8.3) — AI Toolkit below 6.0.0. A user without the admin or power role runs searches at system privilege because Agent Run History swaps the caller's session key for a system auth token — and can read or delete other users' search jobs.
• CVE-2026-76392 (hardcoded creds, 5.4) — AI Toolkit below 6.0.0; non-admin/non-power users can obtain predictable/default container-service credentials.

What to do

Upgrade each affected app to the fixed version in Product Status (Talos → 1.0.3, AI Toolkit → 6.0.0). The page gives no commands; upgrade is the fix.

If you cannot upgrade, the only stated workaround is to turn off or remove the affected app.

Caveats

• Disabling the AI Toolkit is not free: it also disables AI Toolkit SPL commands and model operations, and the Splunk App for Data Science and Deep Learning (DSDL) plus custom commands depending on AI Toolkit models/APIs "might stop functioning." Unrelated custom search commands are unaffected.
• The page text is truncated mid-CVE-76393, so the 9.1 Critical item and the Kafka, MCP Server, and On-Call CVEs are not detailed here — consult Product Status/CVE Details directly before scoping the work.