PT-2025-48953 · Splunk · Splunk Mcp Server

Published 2025-12-03 · Updated 2025-12-03 · CVE-2025-20381

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Splunk MCP Server app versions prior to 0.2.4

Description A user with access to the "run splunk query" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches. This could lead to unauthorized actions beyond the intended MCP restrictions. The vulnerable component is the Model Context Protocol (MCP) tool.

Recommendations Update to Splunk MCP Server app version 0.2.4 or later.

Fix

LPE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2025-16293

CVE-2025-20381

Affected Products

Splunk Mcp Server

References · 6

• https://bdu.fstec.ru/vul/2025-16293 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-20381 · Security Note
• https://advisory.splunk.com/advisories/SVD-2025-1210 · Note
• https://twitter.com/CVEnew/status/1996268274338652566 · Twitter Post
• https://github.com/advisories/GHSA-qf9v-6rq4-3w87 · Note
• https://twitter.com/VulmonFeeds/status/1996318744461590720 · Twitter Post