What’s Vulnerable › Products

Splunk MCP Server vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Splunk MCP Server version is affected

Latest Splunk MCP Server vulnerabilities

• CVE-2026-76286 — Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server (CVSS 5.3)
• CVE-2026-20205 — Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app (CVSS 7.2)
• CVE-2025-20381 — SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool (CVSS 5.4)