Skip to content

TAN-2026-060

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Severity: Medium

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L

Impact

This vulnerability could allow an unauthenticated, network-based attacker who is able to mount a man-in-the-middle attack to view or block endpoint telemetry that Stream sends to a destination configured to use TLS.

Products Affected

2025H1 Release:

  • Endpoint Configuration Toolset Solution prior to Update 26 (v1.51 to v1.51.60)

2025H2 Release:

  • Endpoint Configuration Toolset Solution prior to Update 16 (v1.59 to v1.59.50)

2026H1 Release:

  • Endpoint Configuration Toolset Solution prior to Update 9 (v1.71 to v1.71.25)

Vulnerable tool versions:

  • cx-stream 2.4 prior to 2.4.1184
  • cx-stream 2.7 prior to 2.7.1160
  • cx-stream 2.8 prior to 2.8.1465
  • cx-stream 2.9 prior to 2.9.561

Available Updates

2025H1 Release:

  • Update 26 (Endpoint Configuration Toolset Solution v1.51.60) and later

2025H2 Release:

  • Update 16 (Endpoint Configuration Toolset Solution v1.59.50) and later

2026H1 Release:

  • Update 9 (Endpoint Configuration Toolset Solution v1.71.25) and later

In addition to upgrading all impacted software, Tanium on-prem customers who use ECM should use Change Management in Endpoint Configuration to deploy one of the following Manifests to all endpoints:

  • 2.13.327 or later
  • 2.21.324 or later
  • 2.35.252 or later

Tanium Cloud customers who use ECM should use Change Management in Endpoint Configuration to deploy one of the following Manifests to all endpoints:

  • 2.40.197 or later
  • 2.42.152 or later
  • 2.44.102 or later
  • 2.46.75 or later

Workaround and Mitigations

None.

Acknowledgements

None.