Hard-Coded Credential Vulnerability in Splunk AI Toolkit
CVE-2026-76392

5.4MEDIUM

Key Information:

Vendor

Splunk
Status
Splunk Ai Toolkit
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76392?

The Splunk AI Toolkit prior to version 6.0.0 has a vulnerability that allows users without 'admin' or 'power' roles to gain access to connected container services through predictable or default credentials. This occurs due to the use of hard-coded default values for generated credentials, potentially compromising the security of the services. For detailed guidance, please refer to the Connections tab in the AI Toolkit documentation at Splunk.

Affected Version(s)

Splunk AI Toolkit 5.7 < 6.0.0

References

https://advisory.splunk.com/advisories/SVD-2026-0808

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabriel Nitu, Splunk
.