Skip to content

TAN-2026-051

Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

Severity: Medium

Base Score: 4.2

Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

Impact

This vulnerability could allow an attacker with access to Threat Response service logs to gain read access to sensitive data including credentials for Live Response transfer destinations.

Products Affected

2025H1 Release:

  • Threat Response prior to Update 26 (v4.9 to v4.9.476)

2025H2 Release:

  • Threat Response prior to Update 16 (v4.12 to v4.12.349)

2026H1 Release:

  • Threat Response prior to Update 9 (v4.17 to v4.17.327)

Available Updates

2025H1 Release:

  • Update 26 (Threat Response v4.9.476) and later

2025H2 Release:

  • Update 16 (Threat Response v4.12.349) and later

2026H1 Release:

  • Update 9 (Threat Response v4.17.327) and later

Workaround and Mitigations

None.

Acknowledgements

None.