A config helper that accepts admin input can become an OS command launcher on the Splunk host, so patching the add-on is about protecting the underlying server, not just the toolkit. In Splunk AI Toolkit, that path exists in the btool helper and gives authenticated admins host-level command execution.
Splunk fixed CVE-2026-20266 in AI Toolkit 5.7.4. Atlassian also issued a broad dependency round across Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira, and Jira Service Management, with dozens of flaws landing in shared third-party components such as Axios, Apache Tomcat, and Netty.
The operational risk is broader than one feature or one CVE. If your products inherit shared libraries, the patch may arrive as a parent product update, and the real exposure sits wherever admin-facing helpers pass user-controlled values into shell commands.