Product:
Splunk MCP Server app
Summary
In Splunk MCP Server app versions below 0.2.4, a user with access to the run_splunk_query Model Context Protocol tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches. This leads to unauthorized actions beyond the intended MCP restrictions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2025-20381 |
Exploitation
To exploit this vulnerability, an attacker with access to the run_splunk_query tool can craft SPL commands that include sub-searches. By doing so, they can bypass the allowlist controls and execute unauthorized commands, potentially leading to data manipulation or unauthorized access.
Affected Products
- Splunk MCP Server app versions below 0.2.4: Vulnerable to bypassing SPL command allowlist controls.
Mitigation
To mitigate this vulnerability, users should upgrade to Splunk MCP Server app version 0.2.4 or later. Additionally, organizations should review access controls and monitor the use of the run_splunk_query tool to prevent unauthorized actions.