Improper Access Controls in Tanium Interact Software Vulnerability
CVE-2025-15288

3.1LOW

Key Information:

Vendor

Tanium

Status
Interact
Vendor
CVE Published:
29 January 2026

What is CVE-2025-15288?

The vulnerability involves improper access controls in Tanium's Interact software, which may allow unauthorized users to gain access to sensitive information or functionality. This weakness can compromise the integrity of the application and lead to data exposure. Organizations utilizing Tanium Interact should assess their systems and apply the latest patches provided by Tanium to mitigate potential risks. For further details, refer to TAN-2025-034.

Affected Version(s)

Interact 3.5.0 < 3.5.90

References

https://security.tanium.com/TAN-2025-034

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.