CVE-2026-76392: The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. in Splunk Splunk AI Toolkit

Splunk AI Toolkit versions below 6.0.0 contain hard-coded or predictable credentials used for inbound authentication, outbound communication, or encryption of internal data related to connected container services. Users lacking admin or power roles can obtain these credentials due to their predictable or default nature. This vulnerability is identified as CVE-2026-76392 with a CVSS 3.1 score of 5.4, indicating medium severity. The affected versions are 5.7 and all versions from 5.7 up to but excluding 6.0.0.

An unauthorized user with lower privileges than admin or power roles can obtain predictable or default credentials for connected container services within the Splunk AI Toolkit. This could lead to unauthorized access to these services, potentially compromising confidentiality and integrity of data handled by these services. The CVSS score of 5.4 reflects limited impact on confidentiality and integrity, with no impact on availability.

No explicit patch or remediation information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to users with appropriate roles and monitor usage of connected container services. Avoid deploying vulnerable versions in sensitive environments.