Skip to content

TAN-2026-054

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

Severity: Medium

Base Score: 6.6

Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Impact

This vulnerability could allow an authenticated Tanium user with the "Permission Administrator" permission to escalate their privileges to administrator.

Products Affected

2025H1 Release:

  • Tanium Server prior to Update 26 (v7.7.3 to v7.7.3.8351)

2025H2 Release:

  • Tanium Server prior to Update 16 (v7.8.2 to v7.8.2.1263)

2026H1 Release:

  • Tanium Server prior to Update 9 (v7.8.4 to v7.8.4.1399)

Available Updates

2025H1 Release:

  • Update 26 (Tanium Server v7.7.3.8351) and later

2025H2 Release:

  • Update 16 (Tanium Server v7.8.2.1263) and later

2026H1 Release:

  • Update 9 (Tanium Server v7.8.4.1399) and later

Workaround and Mitigations

None.

Acknowledgements

None.