PT-2026-36533 · Ghantakiran · Splunk-Mcp-Integration

Largew · Published 2026-05-01 · Updated 2026-05-01 · CVE-2026-7589

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function create csv export of the file services/csv-export-service/app/api/v1/endpoints/csv export.py of the component CSV Export. This manipulation of the argument job name causes path traversal. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-7589

Affected Products

Splunk-Mcp-Integration

References · 6

• 🔥 https://github.com/ghantakiran/splunk-mcp-integration/issues/49 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7589 · Security Note
• https://vuldb.com/vuln/360542/cti · Note
• https://github.com/ghantakiran/splunk-mcp-integration · Note
• https://vuldb.com/vuln/360542 · Note
• https://vuldb.com/submit/804408 · Note