Skip to content

TAN-2026-066

Tanium addressed an improper access controls vulnerability in Comply.

Severity: Medium

Base Score: 6.0

Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Impact

This vulnerability could allow an authenticated Tanium user with the comply report write permission to create or modify Comply assessments.

Products Affected

2025H1 Release:

  • Comply prior to Update 26 (v2.32 to v2.32.263)

2025H2 Release:

  • Comply prior to Update 16 (v2.35 to v2.35.323)

2026H1 Release:

  • Comply prior to Update 9 (v2.37 to v2.37.326)

Available Updates

2025H1 Release:

  • Update 26 (Comply v2.32.263) and later

2025H2 Release:

  • Update 16 (Comply v2.35.323) and later

2026H1 Release:

  • Update 9 (Comply v2.37.326) and later

Workaround and Mitigations

None.

Acknowledgements

None.