The vulnerability exists in the create_csv_export function within services/csv-export-service/app/api/v1/endpoints/csv_export.py of the ghantakiran splunk-mcp-integration project. By manipulating the job_name argument, an attacker can perform path traversal, potentially accessing files outside the intended directory. This can be exploited remotely without authentication or user interaction. The vulnerability is present in version 0b86b09d5e5adf0433acd43c975951224613a1a6. The project uses continuous delivery, so no fixed versions or patches have been disclosed, and the vendor has not yet provided a response or remediation guidance.

The vulnerability allows remote attackers to perform path traversal via the job_name parameter, which may lead to unauthorized access to files on the system where the splunk-mcp-integration component is deployed. The CVSS 4.0 score is 6.9 (medium severity), indicating a significant but not critical risk. There is no evidence of known exploits in the wild at this time.

No official patch or remediation is currently available, and the vendor has not responded to the issue report. Users should monitor the vendor's project for updates or fixes due to the continuous delivery model. Until a fix is released, consider restricting access to the affected service and validating or sanitizing inputs to the create_csv_export function if possible to mitigate path traversal risks.