Executive Summary
Splunk patched an OS command injection in its AI Toolkit, and Atlassian fixed dozens of third-party dependency flaws.
What Happened
Splunk patched an OS command injection in AI Toolkit, while Atlassian fixed dozens of flaws in third-party dependencies. The post Atlassian, Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek .
Affected Products
- Splunk AI Toolkit
- Atlassian
Vulnerability / Attack Technique
Command injection in an AI toolkit
Technical Mechanism
Patch release.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
AI add-ons to existing platforms bring new flaws.
Recommended Controls
- Update Splunk AI Toolkit
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/atlassian-splunk-patch-critical-vulnerabilities/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.