Splunk MCP Server App SPL Command Allowlist Bypass Vulnerability

A vulnerability exists in the Splunk MCP Server app in versions prior to 0.2.4. Users with access to the 'run_splunk_query' Model Context Protocol (MCP) tool can bypass the SPL command allowlist controls. This is achieved by embedding SPL commands as sub-searches, which allows for unauthorized actions that exceed the intended MCP restrictions.

Impact

Exploitation of this vulnerability could lead to unauthorized actions within the Splunk MCP Server app, bypassing established command restrictions.

Remediation

Users are advised to upgrade Splunk MCP Server to version 0.2.4 or higher. If the Splunk MCP Server app is not in use, it can be turned off.