CVE-2026-20266: OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

Synopsis

This is an OS command injection vulnerability in the btool configuration helper component of Splunk AI Toolkit versions below 5.7.4. It is reachable over the network but requires an admin-level Splunk account; the btool helper constructs OS command strings from dynamic parameters without sanitizing or disabling shell interpretation, letting an attacker inject arbitrary shell commands. Successful exploitation gives the attacker full command execution on the underlying host running Splunk Enterprise, enabling data theft, file tampering, and service disruption. A patched-image rebuild at version 5.7.4 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the Splunk Enterprise web or API surface over the network; the service must be accessible from the attacker's position.

• AuthenticationRequired

  An admin-level Splunk role account is required; a standard low-privilege user account is not sufficient to reach the vulnerable btool code path.

• Victim interactionNot required

  No victim interaction is needed; the attacker triggers the injection directly through the admin interface without any social-engineering step.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layout, or other unpredictable environmental factors.

Blast Radius

• Executes arbitrary OS commands on the host running Splunk Enterprise, giving the attacker a shell on the underlying server.
• Reads any file accessible to the Splunk process user, including configuration files, credentials, and indexed log data.
• Writes or modifies files on the host, enabling persistence mechanisms such as backdoors or cron jobs.
• Crashes or disables the Splunk Enterprise process and dependent services, disrupting log ingestion and security monitoring pipelines.