Power-user privilege escalation via scheduled search edits

Privilege escalation in Splunk AI Toolkit before 6.0.1 allows remote authenticated users to run arbitrary SPL as a search owner. App-provided scheduled searches can be edited by users with the power role even when those searches execute with the owner's permissions, so untrusted SPL is accepted under a more privileged security context. Exposure requires authenticated access with the power role, and successful abuse can read all data available to the search owner and alter results or downstream actions performed by that search.