Skip to content

TAN-2026-067

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

Severity: Medium

Base Score: 6.6

Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Impact

This vulnerability could allow an attacker with access to Reputation service logs to gain read access to sensitive data including credentials for reputation providers.

After updating Reputation, Tanium On Prem users should rotate the credentials for their reputation providers.

Tanium Cloud users should rotate the credentials for their reputation providers.

Products Affected

2025H1 Release:

  • Reputation prior to Update 26 (v6.6 to v6.6.145)

2025H2 Release:

  • Reputation prior to Update 16 (v6.7 to v6.7.138)

2026H1 Release:

  • Reputation prior to Update 9 (v6.8 to v6.8.162)

Available Updates

2025H1 Release:

  • Update 26 (Reputation v6.6.145) and later

2025H2 Release:

  • Update 16 (Reputation v6.7.138) and later

2026H1 Release:

  • Update 9 (Reputation v6.8.162) and later

Workaround and Mitigations

None.

Acknowledgements

None.