Skip to content

TAN-2026-092

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.

Severity: High

Base Score: 7.4

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact

This vulnerability could allow an unauthenticated, network-based attacker who is able to mount a man-in-the-middle attack to gain read and write access to data they should not have access to.

Products Affected

2025H1 Release:

  • Asset prior to Update 27 (v1.33 to v1.33.334)
  • Automate prior to Update 27 (v1.8 to v1.8.144)
  • Comply prior to Update 27 (v2.32 to v2.32.275)
  • Connect prior to Update 27 (v5.29 to v5.29.272)
  • Directory Query prior to Update 27 (v1.4 to v1.4.190)
  • Email prior to Update 27 (v1.3 to v1.3.180)
  • Endpoint Configuration Toolset Solution prior to Update 27 (v1.51 to v1.51.61)
  • Enforce prior to Update 27 (v2.9 to v2.9.741)
  • Guide prior to Update 27 (v1.9 to v1.9.129)
  • Health Check prior to Update 27 (v1.13 to v1.13.653)
  • Integrity Monitor prior to Update 27 (v3.6 to v3.6.608)
  • Messaging (Message Bus in Provisioner) prior to Update 27 (v1.1 to v1.1.104)
  • Partner Integration prior to Update 27 (v1.3 to v1.3.80)
  • Patch prior to Update 27 (v3.24 to v3.24.328)
  • Performance prior to Update 27 (v1.22 to v1.22.355)
  • Provision prior to Update 27 (v1.17 to v1.17.161)
  • Reputation prior to Update 27 (v6.6 to v6.6.150)
  • Reveal prior to Update 27 (v2.4 to v2.4.109)
  • Screen Sharing prior to Update 27 (v2.0 to v2.0.285)
  • TanOS prior to Update 27 (v1.8.5 to v1.8.5.0326)
  • Threat Response prior to Update 27 (v4.9 to v4.9.480)
  • Zero Trust prior to Update 27 (v2.1 to v2.1.308)

2025H2 Release:

  • Account Management Broker prior to Update 17 (v1.3 to v1.3.126)
  • Asset prior to Update 17 (v1.36 to v1.36.182)
  • Automate prior to Update 17 (v1.13 to v1.13.131)
  • Comply prior to Update 17 (v2.35 to v2.35.337)
  • Connect prior to Update 17 (v5.37 to v5.37.177)
  • Directory Query prior to Update 17 (v1.5 to v1.5.306)
  • Email prior to Update 17 (v1.5 to v1.5.77)
  • Endpoint Configuration Toolset Solution prior to Update 17 (v1.59 to v1.59.51)
  • Endpoint Provider prior to Update 17 (v1.1 to v1.1.124)
  • Enforce prior to Update 17 (v2.10 to v2.10.783)
  • Guide prior to Update 17 (v1.11 to v1.11.211)
  • Health Check prior to Update 17 (v1.13 to v1.13.653)
  • Integrity Monitor prior to Update 17 (v3.7 to v3.7.383)
  • Messaging (Message Bus in Provisioner) prior to Update 17 (v1.3 to v1.3.197)
  • Partner Integration prior to Update 17 (v1.5 to v1.5.251)
  • Patch prior to Update 17 (v3.28 to v3.28.346)
  • Performance prior to Update 17 (v1.23 to v1.23.318)
  • Provision prior to Update 17 (v1.23 to v1.23.173)
  • Reputation prior to Update 17 (v6.7 to v6.7.143)
  • Reveal prior to Update 17 (v2.5 to v2.5.166)
  • Screen Sharing prior to Update 17 (v2.1 to v2.1.234)
  • TanOS prior to Update 17 (v1.8.6 to v1.8.6.0193)
  • Threat Response prior to Update 17 (v4.12 to v4.12.353)
  • Zero Trust prior to Update 17 (v2.1 to v2.1.308)

2026H1 Release:

  • Account Management Broker prior to Update 10 (v1.4 to v1.4.197)
  • Asset prior to Update 10 (v1.39 to v1.39.164)
  • Automate prior to Update 10 (v1.21 to v1.21.73)
  • Comply prior to Update 10 (v2.37 to v2.37.347)
  • Connect prior to Update 10 (v5.47 to v5.47.135)
  • Directory Query prior to Update 10 (v1.7 to v1.7.261)
  • Email prior to Update 10 (v1.14 to v1.14.32)
  • Endpoint Configuration Toolset Solution prior to Update 10 (v1.71 to v1.71.26)
  • Endpoint Provider prior to Update 10 (v1.3 to v1.3.159)
  • Enforce prior to Update 10 (v3.0 to v3.0.380)
  • Guide prior to Update 10 (v1.15 to v1.15.225)
  • Health Check prior to Update 10 (v1.13 to v1.13.653)
  • Integrity Monitor prior to Update 10 (v3.8 to v3.8.362)
  • Messaging (Message Bus in Provisioner) prior to Update 10 (v1.3 to v1.3.197)
  • Operational Technology prior to Update 10 (v1.0 to v1.0.165)
  • Partner Integration prior to Update 10 (v1.6 to v1.6.504)
  • Patch prior to Update 10 (v3.32 to v3.32.383)
  • Performance prior to Update 10 (v1.25 to v1.25.196)
  • Provision prior to Update 10 (v1.24 to v1.24.212)
  • Reputation prior to Update 10 (v6.8 to v6.8.167)
  • Reveal prior to Update 10 (v2.5 to v2.5.166)
  • Screen Sharing prior to Update 10 (v2.2 to v2.2.209)
  • TanOS prior to Update 10 (v1.9.0 to v1.9.0.0089)
  • Threat Response prior to Update 10 (v4.17 to v4.17.333)
  • Zero Trust prior to Update 10 (v2.1 to v2.1.308)

Vulnerable tool versions:

  • Provision Host 10.4 prior to 10.4.100
  • Provision Host 10.8 prior to 10.8.115
  • Provision Host 10.9 prior to 10.9.113
  • Provision Host 10.10 prior to 10.10.189
  • Provision Host 10.11 prior to 10.11.127
  • cx-stream 2.4 prior to 2.4.1187
  • cx-stream 2.7 prior to 2.7.1163
  • cx-stream 2.8 prior to 2.8.1466
  • cx-stream 2.9 prior to 2.9.562

Available Updates

2025H1 Release:

  • Update 27 (Asset v1.33.334) and later
  • Update 27 (Automate v1.8.144) and later
  • Update 27 (Comply v2.32.275) and later
  • Update 27 (Connect v5.29.272) and later
  • Update 27 (Directory Query v1.4.190) and later
  • Update 27 (Email v1.3.180) and later
  • Update 27 (Endpoint Configuration Toolset Solution v1.51.61) and later
  • Update 27 (Enforce v2.9.741) and later
  • Update 27 (Guide v1.9.129) and later
  • Update 27 (Health Check v1.13.653) and later
  • Update 27 (Integrity Monitor v3.6.608) and later
  • Update 27 (Messaging (Message Bus in Provisioner) v1.1.104) and later
  • Update 27 (Partner Integration v1.3.80) and later
  • Update 27 (Patch v3.24.328) and later
  • Update 27 (Performance v1.22.355) and later
  • Update 27 (Provision v1.17.161) and later
  • Update 27 (Reputation v6.6.150) and later
  • Update 27 (Reveal v2.4.109) and later
  • Update 27 (Screen Sharing v2.0.285) and later
  • Update 27 (TanOS v1.8.5.0326) and later
  • Update 27 (Threat Response v4.9.480) and later
  • Update 27 (Zero Trust v2.1.308) and later

2025H2 Release:

  • Update 17 (Account Management Broker v1.3.126) and later
  • Update 17 (Asset v1.36.182) and later
  • Update 17 (Automate v1.13.131) and later
  • Update 17 (Comply v2.35.337) and later
  • Update 17 (Connect v5.37.177) and later
  • Update 17 (Directory Query v1.5.306) and later
  • Update 17 (Email v1.5.77) and later
  • Update 17 (Endpoint Configuration Toolset Solution v1.59.51) and later
  • Update 17 (Endpoint Provider v1.1.124) and later
  • Update 17 (Enforce v2.10.783) and later
  • Update 17 (Guide v1.11.211) and later
  • Update 17 (Health Check v1.13.653) and later
  • Update 17 (Integrity Monitor v3.7.383) and later
  • Update 17 (Messaging (Message Bus in Provisioner) v1.3.197) and later
  • Update 17 (Partner Integration v1.5.251) and later
  • Update 17 (Patch v3.28.346) and later
  • Update 17 (Performance v1.23.318) and later
  • Update 17 (Provision v1.23.173) and later
  • Update 17 (Reputation v6.7.143) and later
  • Update 17 (Reveal v2.5.166) and later
  • Update 17 (Screen Sharing v2.1.234) and later
  • Update 17 (TanOS v1.8.6.0193) and later
  • Update 17 (Threat Response v4.12.353) and later
  • Update 17 (Zero Trust v2.1.308) and later

2026H1 Release:

  • Update 10 (Account Management Broker v1.4.197) and later
  • Update 10 (Asset v1.39.164) and later
  • Update 10 (Automate v1.21.73) and later
  • Update 10 (Comply v2.37.347) and later
  • Update 10 (Connect v5.47.135) and later
  • Update 10 (Directory Query v1.7.261) and later
  • Update 10 (Email v1.14.32) and later
  • Update 10 (Endpoint Configuration Toolset Solution v1.71.26) and later
  • Update 10 (Endpoint Provider v1.3.159) and later
  • Update 10 (Enforce v3.0.380) and later
  • Update 10 (Guide v1.15.225) and later
  • Update 10 (Health Check v1.13.653) and later
  • Update 10 (Integrity Monitor v3.8.362) and later
  • Update 10 (Messaging (Message Bus in Provisioner) v1.3.197) and later
  • Update 10 (Operational Technology v1.0.165) and later
  • Update 10 (Partner Integration v1.6.504) and later
  • Update 10 (Patch v3.32.383) and later
  • Update 10 (Performance v1.25.196) and later
  • Update 10 (Provision v1.24.212) and later
  • Update 10 (Reputation v6.8.167) and later
  • Update 10 (Reveal v2.5.166) and later
  • Update 10 (Screen Sharing v2.2.209) and later
  • Update 10 (TanOS v1.9.0.0089) and later
  • Update 10 (Threat Response v4.17.333) and later
  • Update 10 (Zero Trust v2.1.308) and later

In addition to upgrading all impacted software, Tanium on-prem customers who use ECM should use Change Management in Endpoint Configuration to deploy one of the following Manifests to all endpoints:

  • 2.13.331 or later
  • 2.21.328 or later
  • 2.35.256 or later

Tanium Cloud customers who use ECM should use Change Management in Endpoint Configuration to deploy one of the following Manifests to all endpoints:

  • 2.42.194 or later
  • 2.44.146 or later
  • 2.46.120 or later
  • 2.48.125 or later

Workaround and Mitigations

None.

Acknowledgements

None.