Latest
●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials●Functype MCP server flaw let tool calls run arbitrary code●Token Security says blast radius matters more than patch speed●OpenAI agent validated 14 leaked Hugging Face tokens●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets●MLflow autologging writes CrewAI API keys into trace data●AI agent finds four severe flaws in EPICS control software
Wednesday, 28 October 2026
5 agent hacks today▼ 5 vs yesterday (10)
The Agentic TimesPowered byVortal

Incident database

Splunk AI Toolkit privilege escalation and MCP Server command execution

Two vulnerabilities in Splunk products allow unauthorized privilege escalation and arbitrary command execution. CVE-2026-76391 enables non-admin users to run searches with system-level privileges in AI Toolkit below 6.0.0, while CVE-2026-76404 allows admin users to execute arbitrary OS commands in MCP Server app below 1.2.1.

Disclosed 19 August 2026 · Record updated 1 October 2026

Impact

Unauthorized users can escalate privileges to run system-level searches and access other users' data; admin users can execute arbitrary operating system commands.

Our coverage

No articles linked to this incident yet.

Sources

  1. nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-76391
  2. nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-76404