According to CoinMeta, as reported by Forkast, the model context protocol (MCP) of Splunk has rapidly become the standard for connecting AI proxies with enterprise data, with monthly downloads exceeding 500 million and nearly 16,000 public servers. With the official release of the Splunk MCP server in the first quarter of 2026, AI proxies can now directly access core enterprise visibility data such as logs, alerts, and dashboards. However, this integration has also introduced security risks; Clawsecure has revealed a critical vulnerability in the MCP specification that attackers can exploit to gain control. This vulnerability allows anyone with write permissions to turn the integration into a channel for data leakage. The Splunk MCP server itself also has a remote code execution vulnerability (CVE-2026-76404), affecting versions prior to 1.2.1, which requires immediate upgrading to fix.