The vulnerability is an improper control of a resource through its lifetime, classified as CWE-664. It allows a flaw in how Splunk SOAR manages and releases resources, enabling an attacker who influences resource handling to cause abnormal termination or exhaustion of system resources and potentially corrupt data used by the platform.

Splunk SOAR installations are vulnerable. The vendor recommends upgrading to version 8.7.0 or later; no specific affected version range is listed in the data, so any deployment prior to 8.7.0 should be considered at risk.

The CVSS score is 9.8, indicating high severity. The EPSS score is less than 1%, suggesting a low likelihood of exploitation. There is no listing in the CISA KEV catalog. The risk is driven by the possibility of denial of service or data corruption. The attack vector is not disclosed in the advisory, but the weakness involves internal resource handling, implying that privileged or remote access to the resource-handling component could be required.