Skip to content

TAN-2026-096

Tanium addressed an improper access controls vulnerability in Enforce.

Severity: Medium

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact

This vulnerability could allow an authenticated Tanium user with the Enforce policy write permission with zero content sets to move Enforce policies between content sets.

Products Affected

2025H2 Release:

  • Enforce prior to Update 16 (v2.10.0 to v2.10.778)

2026H1 Release:

  • Enforce prior to Update 9 (v3.0.0 to v3.0.373)

Available Updates

2025H2 Release:

  • Update 16 (Enforce v2.10.778) and later

2026H1 Release:

  • Update 9 (Enforce v3.0.373) and later

Workaround and Mitigations

None.

Acknowledgements

None.