Skip to content

TAN-2026-078

Tanium addressed an insufficient logging vulnerability in Tanium Server.

Severity: Low

Base Score: 2.7

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Impact

This vulnerability could allow an authenticated Tanium user with the "Write Global Settings" permission to change Tanium Core Platform settings without the previous and new setting values being recorded in the audit log.

Products Affected

2025H1 Release:

  • Tanium Server prior to Update 26 (v7.7.3 to v7.7.3.8351)

2025H2 Release:

  • Tanium Server prior to Update 16 (v7.8.2 to v7.8.2.1263)

2026H1 Release:

  • Tanium Server prior to Update 9 (v7.8.4 to v7.8.4.1399)

Available Updates

2025H1 Release:

  • Update 26 (Tanium Server v7.7.3.8351) and later

2025H2 Release:

  • Update 16 (Tanium Server v7.8.2.1263) and later

2026H1 Release:

  • Update 9 (Tanium Server v7.8.4.1399) and later

Workaround and Mitigations

None.

Acknowledgements

None.