splunk model context protocol server vulnerabilities (CVE)

CVE records published for splunk model context protocol server, newest first. Follow to get an email when a new one appears.

1 results

9.1Critical

CVE-2026-76404 2 months ago

Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app

Splunk Splunk MCP Server app

In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management c…