CVE-2026-87030: Tanium addressed a path traversal vulnerability in Comply.

Q: Who is realistically exposed to exploitation?

Network-accessible Tanium Comply deployments are exposed if an attacker has low-level privileges. The attack requires no user interaction and has low attack complexity.

Q: What impact could successful exploitation have?

The CVSS vector indicates high integrity impact and low availability impact, with no confidentiality impact. It also indicates a changed scope, meaning effects may extend beyond the initially vulnerable security authority.

Published Sep 9, 2026

Updated

Tanium addressed a path traversal vulnerability in Comply.

Affected Software

4 affected components

Tanium Comply

Tanium Comply>=2.32.0<2.32.252

Tanium Comply>=2.35.0<2.35.306

Tanium Comply>=2.37.0<2.37.308

Event History

Sep 9, 2026

CVE Published

via MITRE·02:07 AM

Data Sourced

via MITRE·02:07 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is realistically exposed to exploitation?

Network-accessible Tanium Comply deployments are exposed if an attacker has low-level privileges. The attack requires no user interaction and has low attack complexity.

What impact could successful exploitation have?