CVE-2026-108313: Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
Published Oct 27, 2026
·Updated
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
Affected Software
1 affected component
Tanium Tanium Server
Event History
Oct 27, 2026
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs high privileges and network access. User interaction is not required, but exploitation is rated as high complexity.
2
What could a successful exploit allow?
The vulnerability is rated as having high impact on confidentiality, integrity, and availability. The CVSS vector indicates the impact remains within the same security authority (scope unchanged).
3
Is this likely to be exploitable by an unauthenticated remote attacker?
No. The CVSS vector lists privileges required as high, so an unauthenticated attacker would not meet the stated access requirement.