In Splunk AI Toolkit versions below 6.0.0, specifically version 5.7, a user assigned a role with the schedule_search capability can exploit improper access control by causing a scheduled search to load and deserialize a model file through the apply search command. The root cause is that the apply search command is not marked as risky, allowing users with limited privileges to perform actions that should require higher trust. This vulnerability is tracked as CVE-2026-76396 and has a CVSS 3.1 base score of 7.5, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring low privileges but high attack complexity.

An attacker with a role that includes the schedule_search capability can execute a scheduled search that loads and deserializes model files, potentially leading to unauthorized code execution or manipulation of the AI Toolkit's behavior. This improper privilege assignment can compromise confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict the schedule_search capability to trusted users only and monitor scheduled searches for unusual activity. Review Splunk documentation and advisories for updates on this vulnerability.