CVE-2026-7589 | ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6 CSV Export csv_export.py create_csv_export job_name path traversal (Issue 49)

SecurityVulns
Yanac

A vulnerability classified as critical has been found in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function create_csv_export of the file services/csv-export-service/app/api/v1/endpoints/csv_export.py of the component CSV Export. This manipulation of the argument job_name causes path traversal.

This vulnerability is handled as CVE-2026-7589. The attack can be initiated remotely. Additionally, an exploit exists.

Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More