Skip to content

TAN-2026-048

Tanium addressed an improper access controls vulnerability in Threat Response.

Severity: Medium

Base Score: 6.3

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Impact

This vulnerability could allow an authenticated Tanium user with the Threat Response Alerts Write permission to create or modify Threat Response alerts that they should not have access to.

Products Affected

2025H1 Release:

  • Threat Response prior to Update 25 (v4.9.449)

2025H2 Release:

  • Threat Response prior to Update 15 (v4.12.319)

2026H1 Release:

  • Threat Response prior to Update 8 (v4.17.291)

Available Updates

2025H1 Release:

  • Update 25 (Threat Response v4.9.449) and later

2025H2 Release:

  • Update 15 (Threat Response v4.12.319) and later

2026H1 Release:

  • Update 8 (Threat Response v4.17.291) and later

Workaround and Mitigations

None.

Acknowledgements

None.