CVE-2013-6771: Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to e...

Security readout for executives and security teams

CVE-2013-6771 affects Splunk versions before 5.0.5. A flaw in the collect script let a remote attacker use directory traversal in a file parameter and potentially run arbitrary commands. For organizations still running legacy Splunk, this should be treated as serious because command execution can threaten the host and data processed by Splunk. Exposure is most likely in legacy Splunk deployments older than 5.0.5 where the vulnerable collect script is reachable. The provided CVE data does not identify supported product editions, authentication requirements, or deployment-specific prerequisites. Prioritize remediation if any production or internet-reachable Splunk instance is older than 5.0.5. The business concern is unauthorized command execution on systems that may handle sensitive operational and security data. Mitigation focus: Inventory Splunk instances and identify any versions earlier than 5.0.5.; Upgrade confirmed affected instances to 5.0.5 or a vendor-supported fixed release.; Review Splunk's advisory for any deployment-specific mitigation guidance..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.