CVE-2026-108313
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. This may result in users being granted incorrect privileges.
Risk Assessment
Incorrect privilege assignment may allow users to perform actions beyond their role, violating the principle of least privilege.
Recommendation
Update Tanium Server to the latest version and review user and role privilege configuration.
Other vulnerabilities in Tanium Server
See all- CVE-2026-108316Medium
Tanium addressed an information disclosure vulnerability in Tanium Server. Unauthorized access to data may occur.
- CVE-2026-108311Low
Tanium addressed an insufficient logging vulnerability in Tanium Server.
- CVE-2026-108310Medium
Tanium addressed a denial of service vulnerability in Tanium Server. It may lead to service unavailability.
- CVE-2026-87032Medium
Tanium addressed an information disclosure vulnerability in Tanium Server.
- CVE-2026-14892Medium
Tanium addressed an improper access controls vulnerability in Tanium Server.
- CVE-2026-11925Low
Tanium Server has a vulnerability involving User Interface Misrepresentation of Critical Information.
- CVE-2026-15053High
A denial of service vulnerability has been addressed in Tanium Server. This flaw could allow an attacker to disrupt server operations.
- CVE-2026-9156Medium
Tanium addressed a denial of service vulnerability in Tanium Server. The issue could lead to server disruption.
- CVE-2026-6408Low
Tanium addressed an information disclosure vulnerability in Tanium Server. Technical details of the vulnerability were not disclosed in the description.
Original NVD description (English source)
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS