Skip to content

TAN-2026-064

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Severity: High

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact

This vulnerability could allow an authenticated Tanium user with the Read Sensor permission to execute unauthorized code on endpoints running the Mac Downloaded Files sensor.

Products Affected

2025H1 Release:

  • Threat Response prior to Update 26 (v4.9 to v4.9.476)

2025H2 Release:

  • Threat Response prior to Update 16 (v4.12 to v4.12.349)

2026H1 Release:

  • Threat Response prior to Update 9 (v4.17 to v4.17.327)

Available Updates

2025H1 Release:

  • Update 26 (Threat Response v4.9.476) and later

2025H2 Release:

  • Update 16 (Threat Response v4.12.349) and later

2026H1 Release:

  • Update 9 (Threat Response v4.17.327) and later

Workaround and Mitigations

None.

Acknowledgements

None.