Skip to content

TAN-2026-047

Tanium addressed a SQL injection vulnerability in Threat Response.

Severity: High

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact

This vulnerability could allow an attacker with access to a system running the Tanium Client to tamper with the SQL query executed by the Threat Response service.

Products Affected

2025H1 Release:

  • Threat Response prior to Update 25 (v4.9.447)

2025H2 Release:

  • Threat Response prior to Update 15 (v4.12.317)

2026H1 Release:

  • Threat Response prior to Update 8 (v4.17.289)

Available Updates

2025H1 Release:

  • Update 25 (Threat Response v4.9.447) and later

2025H2 Release:

  • Update 15 (Threat Response v4.12.317) and later

2026H1 Release:

  • Update 8 (Threat Response v4.17.289) and later

Workaround and Mitigations

None.

Acknowledgements

None.