Skip to content

TAN-2026-098

Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

Severity: Medium

Base Score: 4.3

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact

This vulnerability could allow an authenticated Tanium user with the Discover Asset read permission to perform a denial of service attack against Discover.

Products Affected

2025H1 Release:

  • Discover prior to Update 26 (v4.10.0 to v4.10.204)

2025H2 Release:

  • Discover prior to Update 16 (v4.15.0 to v4.15.218)

2026H1 Release:

  • Discover prior to Update 9 (v4.19.0 to v4.19.137)

Available Updates

2025H1 Release:

  • Update 26 (Discover v4.10.204) and later

2025H2 Release:

  • Update 16 (Discover v4.15.218) and later

2026H1 Release:

  • Update 9 (Discover v4.19.137) and later

Workaround and Mitigations

None.

Acknowledgements

None.