In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface (API) tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it to access data and perform actions as the user who ran the tool.
SVD-2026-1004: Security Vulnerability in Splunk MCP Server - September/October 2026
About this summary. This is a short excerpt from the description that Splunk published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://advisory.splunk.com/advisories/SVD-2026-1004
Source attribution: headline and facts are from Splunk (advisory.splunk.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
AI Agents Don’t Stop at the Device. Your Security Program Shouldn’t Either.
AI Agents Don’t Stop at the Device. Your Security Program Shouldn’t Either. October 26, 2026 GuidePoint Security By Chris Hughes, VP Security Strategy, Noma BLOG 5 min.
Combining Long-Term Memory and LLMs Comes at a High Cost: From Prompt Injection to Persistent Compromise
arXiv:2610.28810v1 Announce Type: new Abstract: The widespread adoption of generative artificial intelligence in recent years has brought a parallel rise in prompt…
Thinking in Graphs: Neo4j-Backed Exploit-Chain Reasoning for LLM Penetration-Testing Agents
arXiv:2610.20902v1 Announce Type: new Abstract: LLM coding agents such as Claude Code and OpenAI Codex can drive penetration-testing tools, but they reason about an…
GenAI and Agentic AI Exploit Roundup Q3 2026
Coverage period: July 1, 2026 through September 30, 2026 Overview This roundup consolidates selected major AI-related security incidents and exploit disclosures reported…
COPEX: Benchmarking LLM Robustness to Adversarial Context Across Model Context Protocol Layers
arXiv:2610.04378v1 Announce Type: new Abstract: Large language models increasingly mediate tool use in Model Context Protocol (MCP) systems, where adversarial influence…
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
The adoption of AI agents in millions of organizations is creating new opportunities for attackers to make them take malicious actions, such as exfiltrating database…