Tools AI Risk Radar ai-incident-0170
Incident record
Splunk fixes user-token leaks through custom MCP tools
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- Splunk MCP Server before 1.2.1
- Actor
- researcher
- CVE
- CVE-2026-76286
What happened
A person with permission to configure custom MCP API tools could point a tool at an outside address. When another authorised user ran that tool, the destination received that user’s Splunk token.
Splunk MCP Server 1.2.1 fixes the issue. The attacker needs mcp_tool_admin permission and the victim must execute the tool with mcp_tool_execute. Splunk scores the vulnerability 5.3 Medium under CVSS 3.1.
Sources
- Primary disclosureadvisory.splunk.com/advisories/SVD-2026-1004
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026