CVE-2026-76368: The software does not perform an authorization check when an actor attempts to access a resource or perform an action. in Splunk Splunk SOAR

In Splunk SOAR versions below 8.6.0, a lack of authorization checks in the Playbook History functionality allows users holding roles with the playbooks:view permission to access metadata of playbook repositories without proper authorization. This vulnerability arises from the failure to enforce repository permissions when returning playbook revision metadata, potentially exposing sensitive repository information to unauthorized users.

The vulnerability allows unauthorized users with the playbooks:view permission to view metadata about playbook repositories they should not have access to. The impact is limited to information disclosure of playbook revision metadata and does not affect integrity or availability. The CVSS score of 2.7 reflects this limited confidentiality impact with no impact on integrity or availability.

Upgrade to Splunk SOAR version 8.6.0 or later where this authorization check issue is fixed. Since the vulnerability affects versions prior to 8.6.0, applying the official update is the recommended remediation. No additional mitigation steps are indicated by the vendor advisory.