session-tokens 1 SVD-2026-0407: Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app Apr 16, 2026