Path Traversal Vulnerability in CSV Export of Ghantakiran Splunk MCP Integration

CVE-2026-7589

What is CVE-2026-7589?

A vulnerability exists in the CSV Export function of Ghantakiran's Splunk MCP Integration, specifically within the create_csv_export function of the csv_export.py file. This vulnerability arises from improper handling of the job_name argument, allowing an attacker to exploit this weakness to perform a path traversal attack. The issue can be triggered remotely, which poses a significant risk to users of the affected versions. Although the project was notified about this vulnerability through an issue report, there has been no response or corrective action taken as of yet. Detailed technical insights and potential indicators of compromise can be found in related vulnerability databases.

References