The vulnerability is a protection mechanism failure identified in Splunk SOAR. This weakness can allow an attacker to bypass or disable protective controls, potentially enabling unauthorized access or execution of privileged actions. The flaw is classified as CWE-693, which describes the failure to implement adequate protection or control, and can lead to elevated privileges or unauthorized data exposure.

The flaw affects Splunk SOAR installations, though the specific affected versions are not listed. Splunk recommends upgrading to version 8.7.0 or newer, which contains the fix for the protection mechanism failure.

The CVSS score of 9.8 indicates critical severity, while the EPSS score of less than 1% shows a low probability of exploitation in the current environment. The vulnerability is not listed in the CISA KEV catalog, and specific exploit details remain undisclosed, so the likelihood of successful exploitation remains uncertain. Nonetheless, a protection mechanism failure of this magnitude can have severe consequences if an attacker manages to bypass controls, making it a significant risk in environments where Splunk SOAR is exposed without additional safeguards.