CVE-2025-20381 MEDIUM

CVE-2025-20381: SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool

Vendor Splunk
Product Splunk MCP Server
Weakness CWE-863 · Incorrect authorization
Published December 3, 2025
Last update December 3, 2025
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

In Splunk MCP Server app versions below 0.2.4, a user with access to the "run_splunk_query" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions.

Key dates

02Disclosure timeline

December 3, 2025 CVE published
December 3, 2025 Record updated