CVE-2026-76393: The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. in Splunk Splunk AI Toolkit

CVE-2026-76393 describes a race condition in Splunk AI Toolkit versions >=5.7 and <6.0.0 where concurrent uploads of models with the same name can lead to one user's upload overwriting another's. This occurs because the software fails to verify that the uploaded content belongs to the request that creates the model lookup entry, allowing an attacker to cause the resulting model lookup entry to reference malicious content.

An attacker with the ability to upload models can overwrite models uploaded by other users, causing the system to reference attacker-controlled content. This can lead to integrity issues where malicious or unintended models are used, potentially impacting the reliability and trustworthiness of the AI toolkit's outputs. The CVSS score of 5.9 (medium severity) reflects limited confidentiality impact but high integrity impact and low availability impact.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is applied, restrict model upload permissions to trusted users only and monitor for concurrent upload attempts with the same model name to reduce risk.