Skip to content

TAN-2026-021

Tanium addressed a compression bomb vulnerability in Threat Response.

Severity: Low

Base Score: 3.1

Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact

This vulnerability could allow an attacker with access to a system running the Tanium Client to perform a denial of service attack against the Threat Response service.

Products Affected

2025H1 Release:

  • Threat Response prior to Update MR23 (v4.9.437)

2025H2 Release:

  • Threat Response prior to Update MR13 (v4.12.308)

2026H1 Release:

  • Threat Response prior to Update MR6 (v4.17.277)

Available Updates

2025H1 Release:

  • Update MR23 (Threat Response v4.9.437) and later

2025H2 Release:

  • Update MR13 (Threat Response v4.12.308) and later

2026H1 Release:

  • Update MR6 (Threat Response v4.17.277) and later

Workaround and Mitigations

None.

Acknowledgements

None.