Skip to content

TAN-2026-024

Tanium addressed an information disclosure vulnerability in Discover.

Severity: Medium

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact

This vulnerability could allow an authenticated Tanium user with the Discover Asset Read permission to gain read-only access to data they should not have access to.

Products Affected

2025H1 Release:

  • Discover prior to Update 25 (v4.10.190)

2025H2 Release:

  • Discover prior to Update 15 (v4.15.198)

2026H1 Release:

  • Discover prior to Update 8 (v4.19.114)

Available Updates

2025H1 Release:

  • Update 25 (Discover v4.10.190) and later

2025H2 Release:

  • Update 15 (Discover v4.15.198) and later

2026H1 Release:

  • Update 8 (Discover v4.19.114) and later

Workaround and Mitigations

None.

Acknowledgements

None.