3.5
/ 10
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Description
In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10.1.2507.0, 10.0.2503.9, 9.3.2411.112, and 9.3.2408.122, a low-privileged user who does not hold the "admin" or "power" Splunk roles could bypass the SPL safeguards for risky commands when they create a Data Model that contains an injected SPL query within an object. They can bypass the safeguards by exploiting a path traversal vulnerability.
Basic Information
ID
CVE-2026-20137
Source
cisco
Published
Feb 18, 2026 at 16:45
Affected Product
Vendor
Splunk
Product
Splunk Enterprise
Version
10.2
Affected Versions
Splunk Splunk Enterprise 10.2
Splunk Splunk Enterprise 10.0
Splunk Splunk Enterprise 9.4
Splunk Splunk Enterprise 9.3
Splunk Splunk Enterprise 9.2
Splunk Splunk Cloud Platform 10.1.2507
Splunk Splunk Cloud Platform 10.0
Splunk Splunk Cloud Platform 9.3.2411
Splunk Splunk Cloud Platform 9.3.2408
Splunk Splunk Enterprise 10.0
Splunk Splunk Enterprise 9.4
Splunk Splunk Enterprise 9.3
Splunk Splunk Enterprise 9.2
Splunk Splunk Cloud Platform 10.1.2507
Splunk Splunk Cloud Platform 10.0
Splunk Splunk Cloud Platform 9.3.2411
Splunk Splunk Cloud Platform 9.3.2408