Skip to content

TAN-2026-083

Tanium addressed an improper input validation vulnerability in Threat Response.

Severity: Medium

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact

This vulnerability could allow an authenticated Tanium user with the Threat Response Live Response Destinations write permission to redirect data collected by Live Response to a destination outside the organization's control.

Products Affected

2025H1 Release:

  • Threat Response prior to Update 27 (v4.9 to v4.9.480)

2025H2 Release:

  • Threat Response prior to Update 17 (v4.12 to v4.12.353)

2026H1 Release:

  • Threat Response prior to Update 10 (v4.17 to v4.17.333)

Available Updates

2025H1 Release:

  • Update 27 (Threat Response v4.9.480) and later

2025H2 Release:

  • Update 17 (Threat Response v4.12.353) and later

2026H1 Release:

  • Update 10 (Threat Response v4.17.333) and later

Workaround and Mitigations

None.

Acknowledgements

None.