Product
Splunk SOAR versions prior to 8.6.0 are vulnerable to remote code execution because the Automation Broker fails to validate client-supplied source IP headers, allowing unauthenticated attackers to spoof local requests.