Skip to main content
Mallory
Unrated

OS Command Injection in Splunk AI Toolkit btool Configuration Helper

IdentifiersCVE-2026-20266CWE-78

CVE-2026-20266 is a critical OS command injection vulnerability in the btool configuration helper of Splunk AI Toolkit. It affects Splunk AI Toolkit versions below 5.7.4. The flaw is caused by an unsafe shell execution pattern in which the helper constructs operating system command strings from dynamic parameters without disabling shell interpretation. As a result, a user holding the Splunk "admin" role can cause arbitrary OS commands to be executed on the host running the Splunk Enterprise instance.

Share:
For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation allows arbitrary operating system command execution on the underlying host running Splunk Enterprise. This can lead to full compromise of the host in the security context of the vulnerable process, with high impact to confidentiality, integrity, and availability. The provided context also indicates a CVSS v3.1 score of 9.1 with scope changed, reflecting the potential for compromise beyond the application boundary.

Mitigation

If you can’t patch tonight, do this now.

If immediate patching is not possible, Splunk's listed workaround is to uninstall the Splunk AI Toolkit. Additional defensive mitigation based on the described root cause would be to avoid or disable use of the vulnerable helper path where feasible until the upgrade is completed.

Remediation

Patch, then assume compromise.

Upgrade Splunk AI Toolkit to version 5.7.4 or later. The provided context identifies 5.7.4 as the fixed release and recommends applying the vendor update promptly.
PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.
Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity4

Community discussion across Reddit, Mastodon, and other social sources.