Skip to content

TAN-2026-072

Tanium addressed an improper output sanitization vulnerability in Enforce.

Severity: High

Base Score: 7.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Impact

This vulnerability could allow an attacker with access to a system running the Tanium Client to inject arbitrary data, including formulas, in CSV files exported by Enforce.

Products Affected

2025H1 Release:

  • Enforce prior to Update 26 (v2.9 to v2.9.736)

2025H2 Release:

  • Enforce prior to Update 16 (v2.10 to v2.10.778)

2026H1 Release:

  • Enforce prior to Update 9 (v3.0 to v3.0.373)

Available Updates

2025H1 Release:

  • Update 26 (Enforce v2.9.736) and later

2025H2 Release:

  • Update 16 (Enforce v2.10.778) and later

2026H1 Release:

  • Update 9 (Enforce v3.0.373) and later

Workaround and Mitigations

None.

Acknowledgements

None.