Privilege Escalation in Splunk AI Toolkit via Agent Run History

Splunk AI Toolkit versions below 6.0.0 contain a privilege escalation vulnerability (CVE-2026-76391) that allows users without administrative or power user roles to execute searches with system-level privileges. The issue stems from the Agent Run History handler, which incorrectly replaces the user's session key with a system authentication token before initiating search operations. This flaw permits unauthorized users to access restricted data, modify system integrity, and manage search jobs belonging to other users. Defenders should identify instances of the AI Toolkit within their environment and upgrade to version 6.0.0 or higher to remediate the insecure authentication handling.

Impact

Successful exploitation allows a low-privileged user to bypass access controls and perform operations with system-level authorization. This results in unauthorized data exfiltration, the ability to view or delete sensitive search jobs of other users, and potential compromise of system integrity within the Splunk environment.

Recommendation

• Upgrade all Splunk AI Toolkit installations to version 6.0.0 or higher immediately.
• Audit logs for the Agent Run History handler to identify searches initiated by users without appropriate administrative privileges.
• Review permissions for all users assigned to the AI Toolkit to minimize exposure while the patch is being applied.
• Apply the vendor-recommended security patch documented in the Splunk AI Toolkit release notes for version 6.0.0.