CVE-2024-23676: Splunk Cloud

Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit.

Affected products

• Splunk Cloud: before 9.1.2308.200 (fixed in 9.1.2308.200)
• Splunk Splunk: from 9.0.0, before 9.0.8 (fixed in 9.0.8); from 9.1.0, before 9.1.3 (fixed in 9.1.3)

Published 2024-01-22. Last modified 2026-06-17.