{"apiVersion":"1.0","identifier":"CVE-2026-76395","description":"In Splunk AI Toolkit versions below 6.0.0, a user who holds the -power- Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a model codec in Splunk AI Toolkit deserializes sparse matrix data without guarding against embedded pickle content. For more information see Troubleshoot the Splunk Machine Learning Toolkit (https://help.splunk.com/en/splunk-cloud-platform/apply-machine-learning/machine-learning-toolkit-user-guide/5.5.0/troubleshooting-mltk/troubleshoot-the-splunk-machine-learning-toolkit) in the Splunk documentation.","publishedAt":"2026-08-19T22:17:26","lastModifiedAt":"2026-08-26T20:18:01","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76395","cvssScore":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00487,"riskScore":0.92,"affectedProduct":"Splunk AI Toolkit","affectedVersions":"<6.0.0","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-76395","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-76395","en":"https://www.redsauce.net/en/cves/CVE-2026-76395","fr":"https://www.redsauce.net/fr/cves/CVE-2026-76395","pt":"https://www.redsauce.net/pt/cves/CVE-2026-76395","de":"https://www.redsauce.net/de/cves/CVE-2026-76395","sk":"https://www.redsauce.net/sk/cves/CVE-2026-76395","el":"https://www.redsauce.net/el/cves/CVE-2026-76395"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-76395"}}