CVE-2026-20266 PUBLISHED

OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

Assigner: cisco
Reserved: 08.10.2025 Published: 17.06.2026 Updated: 17.06.2026

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance.

The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which constructs OS command strings from dynamic parameters without disabling shell interpretation.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 9.1

Attack Vector	Network	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	High	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Splunk
Product	Splunk AI Toolkit
Versions	affected from 5.7 to 5.7.4 (excl.)

Credits

Gabriel Nitu, Splunk

References

https://advisory.splunk.com/advisories/SVD-2026-0614

Problem Types

The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. cwe